Vulnerability Name:

CVE-1999-0717 (CCN-2186)

Assigned:1999-05-07
Published:1999-05-07
Updated:2018-10-12
Summary:A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
CVSS v3 Severity:3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:2.6 Low (CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Bypass Security
References:Source: MITRE
Type: CNA
CVE-1999-0717

Source: MSKB
Type: UNKNOWN
Q231304

Source: CCN
Type: Microsoft Security Bulletin MS99-014
Patch Available for Excel 97 Virus Warning Vulnerabilities

Source: CCN
Type: OSVDB ID: 10735
Microsoft Excel Virus Warning Mechanism Bypass

Source: CCN
Type: BID-257
Microsoft Excel Password Protected Spreadsheets Bypass Macro Protection Vulnerability

Source: CCN
Type: BID-258
Microsoft Excel XLSTART Directory Bypasses Macro Protection Vulnerability

Source: MS
Type: UNKNOWN
MS99-014

Source: XF
Type: UNKNOWN
excel-virus-warning(2186)

Source: CCN
Type: Microsoft Knowledge Base Article 231304
XL97: Patch Available for Excel 97 Virus Warning Vulnerabilities

Source: CCN
Type: Microsoft Knowledge Base Article 232652
XL97: Overview and History of Excel Patches

Vulnerable Configuration:Configuration 1:
  • cpe:/a:microsoft:excel:*:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:microsoft:windows_2000:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_95:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_98:*:gold:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_nt:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:microsoft:excel:*:*:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows_95:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_98:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2000:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    microsoft excel *
    microsoft windows 2000 *
    microsoft windows 95 *
    microsoft windows 98 * gold
    microsoft windows nt *
    microsoft windows nt 4.0
    microsoft excel *
    microsoft windows 95 *
    microsoft windows nt 4.0
    microsoft windows 98 *
    microsoft windows 2000 *