CVE-2000-0325
HighExploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
The Microsoft Jet database engine allows an attacker to execute commands via a database query, known as the 'VBA Shell' vulnerability.
Risk Assessment
This vulnerability may lead to unauthorized system access and execution of malicious code, posing a significant security threat to the organization.
Recommendation
It is recommended to update the Microsoft Jet database engine to the latest version and implement appropriate security measures to minimize the risk of attack.
Other vulnerabilities in Microsoft Jet database engine
See all- CVE-2017-8718High
The Microsoft JET Database Engine in various versions of Windows allows an attacker to take control of an affected system due to improper handling of objects in memory.
- CVE-2017-8717High
The Microsoft JET Database Engine in various versions of Windows allows an attacker to take control of an affected system due to improper handling of objects in memory.
- CVE-2017-0250High
The Microsoft JET Database Engine in various versions of Windows allows remote code execution due to a buffer overflow.
- CVE-2000-0323High
The Microsoft Jet database engine allows an attacker to modify text files via a database query, known as the 'Text I-ISAM' vulnerability.
Original NVD description (English source)
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.