CVE-2002-0727: The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are...

Security readout for executives and security teams

This legacy issue affects Microsoft Office Web Components 2000 and 2002. A browser-exposed component marked safe for scripting exposed a Host function that could let a remote attacker execute commands through scripted content. Current business risk mainly depends on whether old OWC and Internet Explorer-style ActiveX exposure still exist in the environment. Exposure is most plausible on legacy Windows endpoints or applications that still include Microsoft Office Web Components 2000 or 2002 and permit browser scripting of ActiveX-style controls. Modern environments without OWC 2000/2002 are likely not exposed based on the provided sources. Prioritize this only if legacy Microsoft Office Web Components remain in use. The impact is severe on affected systems, but the issue is old and the provided evidence does not show active exploitation or modern widespread exposure. Mitigation focus: Review and apply Microsoft MS02-044 guidance for affected OWC deployments.; Inventory and remove unsupported OWC 2000 or 2002 components where possible.; Restrict legacy browser scripting of ActiveX controls where business use remains..

Prepared

Jun 30, 2026, 12:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.