3 matches found
CVE-2001-0501
CVE-2001-0501 affects Microsoft Word (Word 2002 and earlier). The vulnerability arises from failure to reliably detect macros embedded in malformed Word documents, allowing a document author to execute arbitrary commands as the user who opens the document even if macro security is set to higher l...
CVE-2001-0240
Microsoft Word before Word 2002 is vulnerable to macros being executed automatically when opening an RTF document that links to a template containing the embedded macro. The root cause is Word’s failure to detect macros embedded in templates referenced by RTF documents, allowing a malicious docum...
CVE-2002-1143
Affected software: Microsoft Word and Microsoft Excel (Office suite). Vulnerability: information disclosure via field codes in Word (INCLUDETEXT) and external updates in Excel, allowing remote attackers to insert and exfiltrate local data when a document is returned to the attacker. Root cause: m...