CVE-2002-1143: Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that...

Security readout for executives and security teams

A malicious Microsoft Word or Excel document could cause sensitive local information to be inserted into the document and exposed when the file is sent back. The bundle does not identify affected versions or current exploitation. The business concern is legacy Office use and document-exchange workflows involving untrusted files. Exposure is most likely where legacy Microsoft Word or Excel versions covered by MS02-059 remain in use and users open, edit, or return documents received from untrusted parties. Treat as a legacy-technology exposure. It is not KEV-listed in the supplied bundle, but unresolved Office installations could leak sensitive files through ordinary document handling. Prioritize discovery and remediation where regulated, legal, finance, or executive document exchange still depends on old Office versions. Mitigation focus: Review Microsoft MS02-059 and apply the vendor-recommended update for applicable Office installations.; Retire or isolate legacy Word and Excel versions that cannot receive the MS02-059 fix.; Restrict opening and returning untrusted Office documents in sensitive workflows..

Prepared

Jun 30, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.