Arbitrary Execution of Visual Basic Programs in Internet Explorer and Outlook

CVE-1999-0354 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.

Learn more about our User Device Pen Test.