Back
CVE-2002-0619
The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).
Published: Aug 12, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| microsoft | office | 2000 |
| microsoft | office | xp |
GitHub Security Advisory GHSA-jq7r-5rhw-2vvw
The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a...
References (8)
- http://marc.info/?l=bugtraq&m=102139136019862&w=2
- http://www.iss.net/security_center/static/9077.php
- http://www.securityfocus.com/bid/5066
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
- http://marc.info/?l=bugtraq&m=102139136019862&w=2
- http://www.iss.net/security_center/static/9077.php
- http://www.securityfocus.com/bid/5066
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
16.08%
Top 3% most likely to be exploited
Threat Score
34.8 / 100
Data Sources
NVD
EPSS
GitHub