PT-1999-1043 · Microsoft · Outlook+2

Published 1999-11-01 · Updated 2021-07-22 · CVE-1999-0354

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 4.x through 5.x Word 97

Description The issue allows arbitrary execution of Visual Basic programs on the client-side through a Word 97 template that contains executable content without warning the user. This also affects Outlook when a user views a malicious email message.

Recommendations For Internet Explorer versions 4.x through 5.x, avoid using Word 97 templates that may contain executable content until a fix is available. For Word 97, refrain from opening templates from untrusted sources to minimize the risk of exploitation. As a temporary workaround, consider disabling the execution of Visual Basic programs in Word 97 and Internet Explorer until a patch is available.

Fix

Related Identifiers

CVE-1999-0354

Affected Products

Internet Explorer

Outlook

Word 97

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-0354 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0354 · Note