CVE-2000-0788

Published: Oct 20, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.

Affected (2)

Products: Microsoft: Access, Word

Microsoft

2 products

Access

Word

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Access	Version 2000
Microsoft Word	Version 2000

References (8)

http://www.securityfocus.com/bid/1566

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/5322

Source: cve@mitre.org

http://www.securityfocus.com/bid/1566

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/5322

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.