microsoft excel 97 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an malicious user to execute a macro virus, aka the "XLM Text Macro" vulnerability.

Microsoft Excel 2000 Microsoft Excel 97

4.6

CVSSv2

Microsoft Excel 97 and 2000 allows an malicious user to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.

Microsoft Excel 2000 Microsoft Excel 97

6.8

CVSSv2

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted malicious users to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument...

Microsoft Excel 2002 Microsoft Excel 2003 Microsoft Excel 2000 Microsoft Excel 95 Microsoft Excel 97

1 EDB exploit

7.5

CVSSv2

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow malicious users to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Microsoft Excel 97

7.5

CVSSv2

Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote malicious users to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, ...

Microsoft Powerpoint 2000 Microsoft Excel 2000 Microsoft Powerpoint 97

5

CVSSv2

Microsoft Word and Excel allow remote malicious users to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fiel...

Microsoft Excel 2002 Microsoft Word 2000 Microsoft Word Microsoft Word 97 Microsoft Word 98 Microsoft Word 2002 Microsoft Word 2001

2 EDB exploits

9.3

CVSSv2

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted malicious users to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.

Microsoft Excel 2000 Microsoft Excel 2002 Microsoft Excel 2003 Microsoft Excel 2004 Microsoft Excel Viewer 2003

1 EDB exploit

7.5

CVSSv2

Microsoft Excel 97, 2000, and 2002 allows remote malicious users to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.

Microsoft Word 97 Microsoft Word 98 Microsoft Word 2000 Microsoft Works 2004 Microsoft Word 2002 Microsoft Works 2001 Microsoft Works 2002 Microsoft Works 2003

7.5

CVSSv2

Vulnerability in (1) Microsoft Excel 2002 and previous versions and (2) Microsoft PowerPoint 2002 and previous versions allows malicious users to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.

Microsoft Excel Microsoft Powerpoint

2.6

CVSSv2

A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.

Microsoft Excel Microsoft Windows Nt 4.0 Microsoft Windows Nt Microsoft Windows 2000 Microsoft Windows 95 Microsoft Windows 98

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook