The HTML interpreter in Microsoft Word, Excel, and Powerpoint 2000 does not properly check bounds in the Object tag when handling HTML files saved as Office documents. Therefore, it is possible to crash the application or execute arbitrary code on the system, depending on the data used in conjunction with the Object tag.
The HTML interpreter in Microsoft Word, Excel, and Powerpoint 2000 does not properly check bounds in the Object tag when handling HTML files saved as Office documents. Therefore, it is possible to crash the application or execute arbitrary code on the system, depending on the data used in conjunction with the Object tag.