CVE-2000-0788

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-07894.6WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain priCVE-2000-07904.6The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs CVE-2000-07914.6Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan hoCVE-2000-07927.5Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services availabCVE-2000-079310.0Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has loggCVE-2000-07947.2Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusaCVE-2000-07957.2Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.CVE-2000-07967.2Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.CVE-2000-07977.2Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.CVE-2000-079810.0The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users tCVE-2000-07993.7inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporaryCVE-2000-080010.0String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gai
CVE-2000-0788: Critical severity, CVSS 10.0 | Vulnix