CVE-2000-0325
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Aug 20, 1999
Updated: Nov 20, 2024
Summary
CVE-2000-0325 is a vulnerability affecting the Microsoft Jet database engine. An attacker can exploit this issue by crafting a malicious database query. Instead of executing the intended command, the engine processes the query as a command shell, enabling the attacker to execute arbitrary system commands. This vulnerability, also known as the "VBA Shell" vulnerability, poses a significant risk, particularly in environments where users have the ability to create and modify databases, potentially leading to system compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Jet
Affected Vendors
- Microsoft