PT-2001-1469 · Microsoft · Office Word

Published 2001-06-27 · Updated 2018-10-12 · CVE-2001-0240

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Word versions prior to 2002

Description The issue allows attackers to automatically execute macros without warning the user. This is achieved via a Rich Text Format (RTF) document that links to a template with the embedded macro.

Recommendations For versions prior to 2002, consider disabling the execution of macros from templates to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0240

Affected Products

Office Word

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-0240 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0240 · Note
• http://securityfocus.com/bid/2753 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6571 · Note