Unscored severity · published Nov 1, 1999
CVE-1999-0354
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the…
–
CVSS
5.2%
EPSS
No
On KEV
Description
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
Internet Explorer · Microsoft
4.0; 5.0 · source: NVD
WO
Word · Microsoft
97 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0354
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0354
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002
More from Internet Explorer
9.8
CVE-2015-0313
Adobe Flash Player Use-After-Free Vulnerability
9.8
CVE-2015-0311
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2014-1776
Microsoft Internet Explorer Memory Corruption Vulnerability
8.8
CVE-2021-27085
Internet Explorer Remote Code Execution Vulnerability
8.8
CVE-2021-26411
Internet Explorer Memory Corruption Vulnerability