CVE-2000-0854

Exploit

EPSS 37.21%
Veröffentlicht 14.11.2000 05:00:00
Zuletzt bearbeitet 16.06.2026 21:52:36
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version2000

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	37.21%	0.983

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html

http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html

http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html

Vendor Advisory

http://www.securityfocus.com/bid/1699

Patch

Vendor Advisory

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/5263

https://nvd.nist.gov/vuln/detail/CVE-2000-0854

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2000-0854

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2000-0854

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2000-0854