CVEvulnerability

CVE-1999-0354

7.5 HIGH Published 1999-11-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 1999-11-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.

Affected configurations

• microsoft internet explorer 4.0 • microsoft internet explorer 5.0 • microsoft word 97

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002 docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002 docs.microsoft.com