CVEvulnerability
CVE-2000-0788
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
Affected configurations
• microsoft access 2000
• microsoft word 2000
Related
Referenced by CWE · observed example (1)
- CWE-356 Missing User Interaction for Potentially Unsafe Action weakness
References
- http://www.securityfocus.com/bid/1566 Exploit, Vendor Advisory
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5322 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/bid/1566 Exploit, Vendor Advisory
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5322 exchange.xforce.ibmcloud.com