Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Word |
Microsoft |
2000 (including) |
2000 (including) |
References