CVE-1999-1055 - Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Back Back to CVE browser

HIGH

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Published Mar 9, 2002

7.5

HIGH

CVSS 2.0

EPSS 7.02%

Description

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://www.securityfocus.com/bid/179
vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1036
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/1737
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/bid/179		vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1036		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/1737		vdb-entryx_refsource_XF