Lucene search

K
nvd[email protected]NVD:CVE-2000-0788
HistoryOct 20, 2000 - 4:00 a.m.

CVE-2000-0788

2000-10-2004:00:00
web.nvd.nist.gov
6

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

High

EPSS

0.009

Percentile

82.9%

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.

Affected configurations

Nvd
Node
microsoftaccessMatch2000
OR
microsoftwordMatch2000
VendorProductVersionCPE
microsoftaccess2000cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*
microsoftword2000cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

High

EPSS

0.009

Percentile

82.9%

Related for NVD:CVE-2000-0788