CVE-2002-0618: The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute co...

Security readout for executives and security teams

CVE-2002-0618 is a legacy Microsoft Excel issue where a malicious workbook could run script code through an XSL stylesheet path, bypassing intended macro security boundaries. Business risk is mainly in environments still opening untrusted files with Excel 2000 or 2002 for Windows. Exposure is likely limited to organizations retaining Excel 2000 or Excel 2002 for Windows, especially on legacy workstations that process email attachments, shared files, or archival Office documents from untrusted sources. Prioritize this when legacy Microsoft Office remains in production or business processes require opening external spreadsheets. For fully modernized environments, urgency is lower, but validation is still worthwhile because old Office installations often persist on unmanaged or operational systems. Mitigation focus: Identify and retire Excel 2000 and 2002 installations where possible.; Review Microsoft MS02-031 and apply vendor-recommended updates or guidance.; Restrict vulnerable systems from opening untrusted Excel workbooks..

Prepared

Jun 30, 2026, 13:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.