CVE Catalog
CVE-2000-0419
HighExploitation Probability (EPSS)
Very high risk21.00%
97th percentile - higher than 97% of all known CVEs
Summary
The Office 2000 UA ActiveX Control is marked as 'safe for scripting,' allowing remote attackers to conduct unauthorized activities via the 'Show Me' function in Office Help.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to organizational systems and data, posing a serious security threat.
Recommendation
It is recommended to disable or restrict the use of the ActiveX control in Office 2000 and to update the software to the latest version to minimize risk.
Original NVD description (English source)
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.