Office

DATE	CVE	VULNERABILITY TITLE	RISK
2000-11-14	CVE-2000-0854	Unspecified vulnerability in Microsoft Office 2000 When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document. network low complexity microsoft critical	10.0
2000-05-11	CVE-2000-0419	Unspecified vulnerability in Microsoft products The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability. network low complexity microsoft	7.5
2000-01-20	CVE-2000-0088	Unspecified vulnerability in Microsoft products Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. local low complexity microsoft	7.2
1999-12-31	CVE-1999-1259	Unspecified vulnerability in Microsoft Office 98 Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information. local low complexity microsoft	2.1
1999-01-01	CVE-1999-0384	Unspecified vulnerability in Microsoft products The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content. local low complexity microsoft	4.6