CVE Catalog

CVE-1999-0384

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.17%

63th percentile - higher than 63% of all known CVEs

Summary

The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can read text from a user's clipboard when the user accesses documents with ActiveX content.

Risk Assessment

The ability to access user clipboard data without authorization poses a significant threat to privacy and information security.

Recommendation

It is recommended to limit the use of the Forms 2.0 ActiveX control and to monitor access to documents with ActiveX content.

Original NVD description (English source)

The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS