vulnwire
10.0crit

CVE-2000-0854in critical feed1 exploit

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and ms…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
37.2%
percentile 99%
Public exploits
1
Exploit-DB

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.

Exploit prediction (EPSS)

37.21% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-20232 Microsoft Windows NT 4.0/2000 - DLL Search Path · local · 2000-09-18

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.