CVE-2002-1716: Microsoft Office

Medium severity, CVSS 5.0. EPSS: 14.3% chance of exploitation in the next 30 days.

The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.

Affected products

• Microsoft Office: version xp only

Published 2002-12-31. Last modified 2026-06-16.