Vulnerability Details CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.109
EPSS Ranking 93.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.cert.org/advisories/CA-2000-07.html
- http://www.microsoft.com/technet/support/kb.asp?ID=262767
- http://www.securityfocus.com/bid/1197
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034
- http://www.cert.org/advisories/CA-2000-07.html
- http://www.microsoft.com/technet/support/kb.asp?ID=262767
- http://www.securityfocus.com/bid/1197
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034
Products affected by CVE-2000-0419
-
cpe:2.3:a:microsoft:access:2000
-
cpe:2.3:a:microsoft:excel:2000
-
cpe:2.3:a:microsoft:frontpage:2000
-
cpe:2.3:a:microsoft:office:2000
-
cpe:2.3:a:microsoft:outlook:2000
-
cpe:2.3:a:microsoft:photodraw_2000:1.0
-
cpe:2.3:a:microsoft:powerpoint:2000
-
cpe:2.3:a:microsoft:project:2000
-
cpe:2.3:a:microsoft:word:2000
-
cpe:2.3:a:microsoft:works:2000