Vulnerability in Microsoft Excel

CVE-2000-0277

Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.

EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.

Affected products

Microsoft Excel — versions 97, 2000
N/a — versions n/a

Weakness classification (CWE)

CWE-254

References

cve@mitre.org (x_refsource_MS, vendor-advisory)
cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)