Microsoft Word Mail Merge vulnerability updated since 07.08.2000
Published:		20.06.2002
Source:		BUGTRAQ
SecurityVulns ID:		415
Type:		client
Level:		6/10
Description:		Microsoft Word document merged with Access database allows to execute VBA procedures without warning.

Affected:		MICROSOFT : Office 2000
		MICROSOFT : Office 97
		MICROSOFT : Word 2000
		MICROSOFT : Word 97
		MICROSOFT : Office XP

Original document		MICROSOFT, Security Bulletin MS02-031: Cumulative Patches for Excel and Word for Windows (Q324458) (20.06.2002)
		ERRor, dH team & SECURITY.NNOV: A variant of "Word Mail Merge" vulnerability (06.05.2002)
		MICROSOFT, Security Bulletin (MS00-071) (06.10.2000)
		Georgi Guninski, MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook (07.08.2000)

Files:		Mail merge vulnerability local POC
		Mail merge vulnerability Outlook Express POC
		A variant of "Word Mail Merge" vulnerability
Discuss:		Read or add your comments to this news (0 comments)