Skip to content
OpenAdvisories
Unscored CVE-1999-1055 EUVD-1999-1036GHSA-cx75-p9pm-2q97

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands b…

Published Mar 9, 2002 · Updated Aug 1, 2024 · Assigned by mitre

Description

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

References