CVE-2002-1143

CVE-2002-1143 describes an information disclosure vulnerability in Microsoft Word and Excel. Remote attackers can leverage specific field codes, such as INCLUDETEXT or INCLUDEPICTURE, to embed sensitive information within a document that is then exfiltrated when returned to the attacker. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for partial confidentiality impact without requiring authentication or complex attack methods. While not listed on CISA's KEV catalog, exploit code for this flaw is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.