Lucene search

MitreCVE-2001-0240

HistorySep 18, 2001 - 4:00 a.m.

CVE-2001-0240

2001-09-1804:00:00

mitre

web.nvd.nist.gov

microsoft word

word 2002

attackers

execute macros

rtf document

user alert

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

20.3%

JSON

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.

Affected configurations

Nvd

Node

microsoftwordMatch97

microsoftwordMatch98mac_os_x

microsoftwordMatch98ja

microsoftwordMatch2000

microsoftwordMatch2001mac_os_x

VendorProductVersionCPE
microsoftword97cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*
microsoftword98cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*
microsoftword98cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*
microsoftword2000cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*
microsoftword2001cpe:2.3:a:microsoft:word:2001:*:*:*:*:mac_os_x:*:*

Vendor	Product	Version	CPE
microsoft	word	97	cpe:2.3:a:microsoft:word:97:::::::*
microsoft	word	98	cpe:2.3:a:microsoft:word:98:::::mac_os_x::
microsoft	word	98	cpe:2.3:a:microsoft:word:98:::ja::::
microsoft	word	2000	cpe:2.3:a:microsoft:word:2000:::::::*
microsoft	word	2001	cpe:2.3:a:microsoft:word:2001:::::mac_os_x::

References

www.securityfocus.com/bid/2753

docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028

exchange.xforce.ibmcloud.com/vulnerabilities/6571

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

20.3%

JSON

Related for CVE-2001-0240