CVE-2000-0788
First published: Fri Oct 20 2000(Updated: )
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Access 2010 | =2000 | |
| Microsoft Office Word | =2000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C@nat.bg
- http://www.securityfocus.com/bid/1566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5322
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg
Frequently Asked Questions
What is the severity of CVE-2000-0788?
CVE-2000-0788 is considered a moderate severity vulnerability due to its potential to execute arbitrary commands via VBA scripts.
How do I fix CVE-2000-0788?
To fix CVE-2000-0788, users should disable macros or change security settings in Microsoft Word and Access to prevent unauthorized execution.
Who is affected by CVE-2000-0788?
CVE-2000-0788 affects users of Microsoft Word 2000 and Microsoft Access 2000.
What type of vulnerability is CVE-2000-0788?
CVE-2000-0788 is a vulnerability related to the execution of arbitrary commands through the Mail Merge tool.
Can CVE-2000-0788 be exploited remotely?
Yes, CVE-2000-0788 can be exploited remotely if an attacker can convince a user to open a malicious document containing VBA scripts.
- agent/first-publish-date
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/event
- agent/description
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft access 2010
- version/microsoft access 2010/2000
- canonical/microsoft office word
- version/microsoft office word/2000