CVE-2000-0419

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.

Published: May 11, 2000
Updated: Apr 13, 2023
CVE: CVE-2000-0419
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / access	2000	2000.x
microsoft / outlook	2000	2000.x
microsoft / powerpoint	2000	2000.x
microsoft / photodraw_2000	1.0	1.0.x
microsoft / excel	2000	2000.x
microsoft / word	2000	2000.x
microsoft / project	2000	2000.x
microsoft / office	2000	2000.x
microsoft / works	2000	2000.x
microsoft / frontpage	2000	2000.x

http://www.cert.org/advisories/CA-2000-07.html
http://www.microsoft.com/technet/support/kb.asp?ID=262767
http://www.securityfocus.com/bid/1197
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034

Vulnerability Database

289,599

CVE-2000-0419