ID CVE-2001-0501
Summary Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:98:*:mac:*:*:*:*:*
    cpe:2.3:a:microsoft:word:98:*:mac:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:sr2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2000:sr2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2001:*:mac:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2001:*:mac:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:-:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:-:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:1.1a:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:1.1a:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:16.0.8730.2050:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.8730.2050:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.8827.2054:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.8827.2054:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.9001.2077:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.9001.2077:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.9029.2068:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.9029.2068:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.9126.2069:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.9126.2069:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.9226.2077:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.9226.2077:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.9330.2060:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.9330.2060:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.9330.2080:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.9330.2080:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.10228.20049:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.10228.20049:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.10325.20043:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.10325.20043:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.10730.20043:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.10730.20043:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.10827.20078:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.10827.20078:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11001.20049:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11001.20049:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11001.20074:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11001.20074:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11029.20056:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11029.20056:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11126.20063:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11126.20063:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11231.20088:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11231.20088:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11328.20080:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11328.20080:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11425.20132:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11425.20132:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11601.20074:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11601.20074:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11629.20124:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11629.20124:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11727.20104:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11727.20104:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11901.20110:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11901.20110:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.11929.20198:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.11929.20198:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12026.20174:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12026.20174:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12130.20208:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12130.20208:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12228.20260:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12228.20260:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12325.20174:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12325.20174:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12430.20120:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12430.20120:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12527.20090:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12527.20090:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12624.20254:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12624.20254:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12730.20182:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12730.20182:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12730.20214:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12730.20214:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:16.0.12827.20140:*:*:*:*:android:*:*
    cpe:2.3:a:microsoft:word:16.0.12827.20140:*:*:*:*:android:*:*
  • cpe:2.3:a:microsoft:word:95:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:95:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*
    cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*
  • cpe:2.3:a:microsoft:word:98:sr1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:98:sr1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:98:sr1:mac_os:*:*:*:*:*
    cpe:2.3:a:microsoft:word:98:sr1:mac_os:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:98:sr2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:98:sr2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:98:sr2:mac_os:*:*:*:*:*
    cpe:2.3:a:microsoft:word:98:sr2:mac_os:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2001:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2001:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2001:*:*:*:*:mac_os_x:*:*
    cpe:2.3:a:microsoft:word:2001:*:*:*:*:mac_os_x:*:*
  • cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2002:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2002:sp3:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 12-10-2018 - 21:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 2876
bugtraq 20010622 Fwd: Microsoft Word macro vulnerability advisory MS01-034
xf msword-macro-bypass-security(6732)
Last major update 12-10-2018 - 21:30
Published 21-07-2001 - 04:00
Last modified 12-10-2018 - 21:30
Back to Top