Vulnerability Name: | CCN-3371 | ||||||
Published: | 1999-10-20 | ||||||
Updated: | 1999-10-20 | ||||||
Summary: | Excel contains a vulnerability when it imports a Lotus 1-2-3 file or a Quattro Pro file. Macros from these files are run automatically without warning the user about possible macro viruses. This could result in a malicious macro deleting files on the user's computer. | ||||||
CVSS v3 Severity: | 5.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
| ||||||
CVSS v2 Severity: | 3.6 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P)
| ||||||
Vulnerability Consequences: | File Manipulation | ||||||
References: | Source: CCN Type: Microsoft Office Update Microsoft Excel 97 XLM Macro Security Update Source: CCN Type: Microsoft Security Bulletin MS99-044 Patch Available for 'Excel SYLK' Vulnerability Source: XF Type: UNKNOWN excel-lotus123-macro(3371) Source: CCN Type: Microsoft Knowledge Base Article 241900 XL97: Opening Lotus 1-2-3 File May Run Macro Without Warning | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |