VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 1, 1999· Updated Jun 16, 2026

CVE-1999-0354

CVE-1999-0354

Description

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Microsoft/Internet Explorer3 versions
    cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.x, 5.x
  • Microsoft/Word2 versions
    cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.