CVE-2000-0419

high

Description

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0418

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034

http://www.securityfocus.com/bid/1197

http://www.microsoft.com/technet/support/kb.asp?ID=262767

http://www.cert.org/advisories/CA-2000-07.html

Details

Source: Mitre, NVD

Published: 2000-05-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N