CVE-1999-0354

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-03555.0Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.CVE-1999-035610.0ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.CVE-1999-03575.0Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involvingCVE-1999-03587.2Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.CVE-1999-03597.5ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.CVE-1999-03607.2MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commanCVE-1999-036110.0NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.CVE-1999-03625.0WS_FTP server remote denial of service through cwd command.CVE-1999-03637.2SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.CVE-1999-036410.0Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.CVE-1999-03657.5The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.CVE-1999-03667.5In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT