Vulnerability Name:

CVE-2000-0088 (CCN-3876)

Assigned:2000-01-19
Published:2000-01-19
Updated:2018-10-12
Summary:Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2000-0088

Source: CCN
Type: Microsoft Security Bulletin MS00-002
Patch Available for "Malformed Conversion Data" Vulnerability

Source: CCN
Type: OSVDB ID: 1208
Microsoft East Asian Word Conversion Document Arbitrary Command Execution

Source: BID
Type: Third Party Advisory, VDB Entry
946

Source: CCN
Type: BID-946
Microsoft East Asian Word Conversion Vulnerability

Source: MS
Type: UNKNOWN
MS00-002

Source: XF
Type: UNKNOWN
office-malformed-convert(3876)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:microsoft:office:97:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:office:97:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:office:97:*:*:zh:*:*:*:*
  • OR cpe:/a:microsoft:office:2000:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:office:2000:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:office:2000:*:*:zh:*:*:*:*
  • OR cpe:/a:microsoft:office_converter_pack:2000.0:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:97:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:97:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:97:*:*:zh:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:2000:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:2000:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:2000:*:*:zh:*:*:*:*
  • OR cpe:/a:microsoft:word:97:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:word:97:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:word:97:*:*:zh:*:*:*:*
  • OR cpe:/a:microsoft:word:98:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:word:98:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:word:98:*:*:zh:*:*:*:*
  • OR cpe:/a:microsoft:word:2000:*:*:ja:*:*:*:*
  • OR cpe:/a:microsoft:word:2000:*:*:ko:*:*:*:*
  • OR cpe:/a:microsoft:word:2000:*:*:zh:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:microsoft:office:2000:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    microsoft office 97
    microsoft office 97
    microsoft office 97
    microsoft office 2000
    microsoft office 2000
    microsoft office 2000
    microsoft office converter pack 2000.0
    microsoft powerpoint 97
    microsoft powerpoint 97
    microsoft powerpoint 97
    microsoft powerpoint 2000
    microsoft powerpoint 2000
    microsoft powerpoint 2000
    microsoft word 97
    microsoft word 97
    microsoft word 97
    microsoft word 98
    microsoft word 98
    microsoft word 98
    microsoft word 2000
    microsoft word 2000
    microsoft word 2000
    microsoft office 2000