CVE-1999-1055

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-cx75-p9pm-2q97

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow...

References (6)

• http://www.securityfocus.com/bid/179
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1737
• http://www.securityfocus.com/bid/179
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1737