PT-2001-1469 · Microsoft · Office Word

Publicado 2001-06-27 · Atualizado 2018-10-12 · CVE-2001-0240

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Word versions prior to 2002

Description The issue allows attackers to automatically execute macros without warning the user. This is achieved via a Rich Text Format (RTF) document that links to a template with the embedded macro.

Recommendations For versions prior to 2002, consider disabling the execution of macros from templates to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0240

Produtos afetados

Office Word

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0240 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0240 · Nota de Segurança
• http://securityfocus.com/bid/2753 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6571 · Nota