CVE-2000-0788

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic VBA scripts in an Access database, which could allow an attacker to execute arbitrary commands...

CVE-2000-0788

The CVE-2000-0788 family concerns the Mail Merge Tool in Microsoft Word. Connected records describe Word 2000/Word 2002 behavior: when Access is present, the Mail Merge tool can execute Visual Basic (VBA) scripts embedded in a mail-merge document saved as HTML, enabling remote command execution. ...

A variant of "Word Mail Merge" vulnerability

Title: A variant of "Word Mail Merge" vulnerability Authors: Err0r, 3APA3A Date: May, 03 2002 Affected: Office 97, 2000, XP Vendor: Microsoft Risk: Average to high Remote: for Office 2000 SR1a and prior Exploitable: Yes Vendor notified: February, 12 2002 Intro: All details on this issue may be...

CVE-2000-0788

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic VBA scripts in an Access database, which could allow an attacker to execute arbitrary commands...

Security Bulletin (MS00-071)

Microsoft Security Bulletin MS00-071 ====================================== Patch Available for "Word Mail Merge" Vulnerability Originally posted: October 5, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Word 2000 and 97. The...