Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Word | Microsoft | 2000 (including) | 2000 (including) |