{"api_version":"1","generated_at":"2026-07-23T07:03:20+00:00","cve":"CVE-2002-1143","urls":{"html":"https://cve.report/CVE-2002-1143","api":"https://cve.report/api/cve/CVE-2002-1143.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-1143","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-1143"},"summary":{"title":"CVE-2002-1143","description":"Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka \"Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2003-04-11 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.iss.net/security_center/static/10155.php","name":"http://www.iss.net/security_center/static/10155.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"ISS X-Force Database: word-includepicture-read-files (10155): Microsoft Word INCLUDEPICTURE field in shared documents can be used to read other files","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059","name":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Security Bulletin MS02-059 - Moderate | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=103252858816401&w=2","name":"http://marc.info/?l=bugtraq&m=103252858816401&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"'More vulnerabilities (Re: Security side-effects of Word fields)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/10008.php","name":"http://www.iss.net/security_center/static/10008.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"ISS X-Force Database: word-includetext-read-files (10008): Microsoft Word INCLUDETEXT field in shared documents can be used to read other files","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp","name":"http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Developer tools, technical documentation and coding examples | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/5764","name":"http://www.securityfocus.com/bid/5764","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Microsoft Word INCLUDEPICTURE Document Sharing File Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/5586","name":"http://www.securityfocus.com/bid/5586","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"title":"Microsoft Word / Excel INCLUDETEXT Document Sharing File Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=103040003014999&w=2","name":"http://marc.info/?l=bugtraq&m=103040003014999&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"'Security side-effects of Word fields' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/899713","name":"http://www.kb.cert.org/vuls/id/899713","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"CERT/CC Vulnerability Note VU#899713","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-1143","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1143","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"excel","cpe6":"2002","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"excel","cpe6":"2002","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"excel","cpe6":"2002","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac_os_x","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2000","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2000","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2000","cpe7":"sr1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2000","cpe7":"sr1a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2001","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac_os_x","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2002","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2002","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"2002","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"97","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"97","cpe7":"sr1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"97","cpe7":"sr2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"98","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"98","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"mac_os_x","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"1143","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"word","cpe6":"98","cpe7":"*","cpe8":"*","cpe9":"ja","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:12:17.034Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20020919 More vulnerabilities (Re: Security side-effects of Word fields)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=103252858816401&w=2"},{"name":"MS02-059","tags":["vendor-advisory","x_refsource_MS","x_transferred"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059"},{"name":"5764","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/5764"},{"name":"word-includetext-read-files(10008)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/10008.php"},{"name":"word-includepicture-read-files(10155)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/10155.php"},{"name":"oval:org.mitre.oval:def:202","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202"},{"name":"5586","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/5586"},{"name":"VU#899713","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/899713"},{"name":"20020826 Security side-effects of Word fields","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=103040003014999&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-08-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka \"Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-12T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20020919 More vulnerabilities (Re: Security side-effects of Word fields)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=103252858816401&w=2"},{"name":"MS02-059","tags":["vendor-advisory","x_refsource_MS"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059"},{"name":"5764","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/5764"},{"name":"word-includetext-read-files(10008)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/10008.php"},{"name":"word-includepicture-read-files(10155)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/10155.php"},{"name":"oval:org.mitre.oval:def:202","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202"},{"name":"5586","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/5586"},{"name":"VU#899713","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/899713"},{"name":"20020826 Security side-effects of Word fields","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=103040003014999&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-1143","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka \"Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20020919 More vulnerabilities (Re: Security side-effects of Word fields)","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=103252858816401&w=2"},{"name":"MS02-059","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059"},{"name":"5764","refsource":"BID","url":"http://www.securityfocus.com/bid/5764"},{"name":"word-includetext-read-files(10008)","refsource":"XF","url":"http://www.iss.net/security_center/static/10008.php"},{"name":"word-includepicture-read-files(10155)","refsource":"XF","url":"http://www.iss.net/security_center/static/10155.php"},{"name":"oval:org.mitre.oval:def:202","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202"},{"name":"5586","refsource":"BID","url":"http://www.securityfocus.com/bid/5586"},{"name":"VU#899713","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/899713"},{"name":"20020826 Security side-effects of Word fields","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=103040003014999&w=2"},{"name":"http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp","refsource":"CONFIRM","url":"http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-1143","datePublished":"2003-04-03T05:00:00.000Z","dateReserved":"2002-09-23T00:00:00.000Z","dateUpdated":"2024-08-08T03:12:17.034Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-04-11 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"C619E79B-90FB-4812-B0F3-115B47498492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"EC893353-909C-49A8-8C3A-AD325C1D365D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:*:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"C51F7DDA-63CA-4FBD-AED0-3CD251A40879"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*","matchCriteriaId":"645B78F8-9AD7-4707-9CAD-5DC79475D971"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*","matchCriteriaId":"FAC7BEA9-AA9B-4FFA-BC09-DD41F7E3EAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*","matchCriteriaId":"682961C4-A208-403F-8C3B-1E08F0414EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*","matchCriteriaId":"E56F9283-7EE3-4F50-AFB6-09CDC06A5121"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"E28225AE-DBBA-44B0-AA1E-B210E6802953"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*","matchCriteriaId":"3B3A5E8E-CCE2-49AF-BAEB-549E3C67430B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"5947AFC8-483F-4597-AB8F-214356E857BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"FEE7CC21-A458-49BB-B437-D5DF09339D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*","matchCriteriaId":"8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2001:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"F5CFFFAE-0B84-4A08-B061-6C652FA81497"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*","matchCriteriaId":"2D90B1E1-23CD-4595-AD78-DA1758E9896D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"51A706AF-333A-4492-B947-A3BA2556F4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"4B90E94C-839A-40B9-A408-6B396EB26102"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"1143","Ordinal":"1","Title":"CVE-2002-1143","CVE":"CVE-2002-1143","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"1143","Ordinal":"1","NoteData":"Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka \"Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.\"","Type":"Description","Title":"CVE-2002-1143"},{"CveYear":"2002","CveId":"1143","Ordinal":"2","NoteData":"2003-04-03","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"1143","Ordinal":"3","NoteData":"2018-10-12","Type":"Other","Title":"Modified"}]}}}