Page 22 of 109 results (0.005 seconds)

CVSS: 7.5EPSS: 2%CPEs: 3EXPL: 0

Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability. • http://www.securityfocus.com/bid/1399 http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589349.ED9DBCAB%40nat.bg https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049 •

CVSS: 7.5EPSS: 2%CPEs: 10EXPL: 0

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability. • http://www.cert.org/advisories/CA-2000-07.html http://www.microsoft.com/technet/support/kb.asp?ID=262767 http://www.securityfocus.com/bid/1197 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034 •

CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0

Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability. • http://www.osvdb.org/1272 http://www.securityfocus.com/bid/1087 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-022 • CWE-254: 7PK - Security Features •

CVSS: 7.5EPSS: 31%CPEs: 1EXPL: 0

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability." • http://www.securityfocus.com/bid/179 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018 https://exchange.xforce.ibmcloud.com/vulnerabilities/1737 •