CVE-2002-0860: The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 all...

Security readout for executives and security teams

This old Microsoft Office Web Components issue could let a malicious webpage read files from a user’s computer through Internet Explorer. The source bundle identifies OWC 2000 and 2002 as affected. Business risk is mainly legacy exposure: systems still relying on IE-era Office web controls may leak sensitive local files. Exposure is likely limited to legacy desktops or applications still using Internet Explorer with Microsoft OWC 2000 or 2002. Modern environments without those components are unlikely to be affected based on the provided source bundle. Treat this as a legacy-risk cleanup item with high priority if OWC 2000 or 2002 remains in use. The impact is sensitive file disclosure, but urgency depends on whether these obsolete components still exist in the environment. Mitigation focus: Review Microsoft MS02-044 and apply the vendor-recommended update or mitigation.; Inventory and remove unsupported OWC 2000 or 2002 installations.; Retire Internet Explorer workflows that load Office Web Components..

Prepared

Jun 30, 2026, 12:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.