CVE-2000-0597 in Internet Explorer

Sumário

de MITRE

Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Divulgação: 27/06/2000
• Moderação: aceite
• Entrada: VDB-15719
• CPE: pronto
• CWE: CWE-269 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.12148
• KEV: não
• Atividades: muito baixo
• Sector: Homeoffice, Industry, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0597
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0597
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0597/