What’s Vulnerable › Vulnerabilities
CVE-2000-0854
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 37.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2000-11-14 · updated 2026-06-16
Description
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
Affected products
- Microsoft Office: 2000
References
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html
- http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html
- http://www.securityfocus.com/bid/1699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5263
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html
- http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html
- http://www.securityfocus.com/bid/1699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5263
Get alerted when CVE-2000-0854 or the next vulnerability affects your stack