CVE-2000-0088

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/946Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-002
http://www.securityfocus.com/bid/946Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-002

Timeline

Published: Jan 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00892.1The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissi CVE-2000-00903.6VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.CVE-2000-009110.0Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor CVE-2000-00926.2The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-009310.0An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.CVE-2000-00947.2procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for CVE-2000-00955.0The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to CVE-2000-00967.2Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.CVE-2000-00975.0The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu CVE-2000-00985.0Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t CVE-2000-00997.2Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-01007.2The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing