CVE-2002-0617: Microsoft Excel

Medium severity, CVSS 5.1. EPSS: 10.8% chance of exploitation in the next 30 days.

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."

Affected products

• Microsoft Excel: version 2000 only; version 2002 only
• Microsoft Office: version 2000 only; version xp only

Published 2002-08-12. Last modified 2026-06-16.