CVE-1999-0354
Published Nov 1, 1999
Last updated 3 years ago
Overview
- Description
- Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5B815D9-BC21-4A17-AF00-B8AD181027D7"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6B8985B-B927-4928-B1DB-18E29F796992"
},
{
"criteria": "cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "645B78F8-9AD7-4707-9CAD-5DC79475D971"
}
],
"operator": "OR"
}
]
}
]