Description
Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
References
- word-asd-macro-execution(6614) vdb-entry
- Q274228 vendor-advisory
- 2760 vdb-entry