CVE-2000-0277: High severity Microsoft Excel vulnerability
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure Excel to disable execution of Excel Macro Language (XLM) macros embedded in external text files or to always prompt/warn the user before executing such macros.
Microsoft Excel XLM macro execution from external text files = disabled or warn - Compensating control
Do not open external text files from untrusted sources. If such files must be examined, open them only in an isolated or sandboxed environment to prevent potential macro virus execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0277?
CVE-2000-0277 is considered a high severity vulnerability due to the risk of macro viruses being executed without user consent.
How do I fix CVE-2000-0277?
To fix CVE-2000-0277, users should apply the latest security updates provided by Microsoft for Excel 97 and 2000.
What does CVE-2000-0277 affect?
CVE-2000-0277 affects Microsoft Excel 97 and 2000, specifically regarding the execution of XLM macros from external text files.
What type of attack does CVE-2000-0277 allow?
CVE-2000-0277 allows attackers to execute macro viruses via XLM macros in external files without user warnings.
Is there a workaround for CVE-2000-0277?
A potential workaround for CVE-2000-0277 is to disable macros in Excel settings to prevent execution of unknown macros.