CVE-1999-1055

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-10587.5Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary com CVE-1999-10605.0Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary comman CVE-1999-106310.0CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.CVE-1999-106410.0Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary com CVE-1999-10657.5Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands CVE-1999-10665.0Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the s CVE-1999-10747.5Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attacker CVE-1999-10764.6Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option an CVE-1999-10774.6Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or C CVE-1999-10787.5WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords CVE-1999-10794.6Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.CVE-1999-10815.0Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.