Описание
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2000-0788
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5322
- http://www.securityfocus.com/bid/1566
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C@nat.bg
EPSS
Процентиль: 93%
0.10498
Средний
CVE ID
Связанные уязвимости
nvd
почти 25 лет назад
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
EPSS
Процентиль: 93%
0.10498
Средний