CVE-2000-0854

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-08555.0SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newlin CVE-2000-08567.5Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long CVE-2000-08577.5The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to caus CVE-2000-08585.0Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed re CVE-2000-08595.0The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests CVE-2000-08605.0The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names CVE-2000-08617.2Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.CVE-2000-08626.4Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configur CVE-2000-08637.2Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.CVE-2000-08646.2Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of a CVE-2000-08657.2Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.CVE-2000-08662.1Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.