Lucene search

K
nvd[email protected]NVD:CVE-2000-0597
HistoryJun 27, 2000 - 4:00 a.m.

CVE-2000-0597

2000-06-2704:00:00
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the “Office HTML Script” vulnerability.

Affected configurations

NVD
Node
microsoftexcelMatch2000
OR
microsoftpowerpointMatch97
OR
microsoftpowerpointMatch2000

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

Related for NVD:CVE-2000-0597