CVE-2001-0628

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-062910.0HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privilegesCVE-2001-06305.0Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack inCVE-2001-06315.0Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'FCVE-2001-06327.5Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a reCVE-2001-06335.0Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web roCVE-2001-06347.2Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and creaCVE-2001-06354.6Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional pCVE-2001-06367.5Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SiCVE-2001-06414.6Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S optiCVE-2001-06422.1Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive bCVE-2001-06435.0Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick theCVE-2001-06447.5Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which co