← Database

CVE-1999-1055

HIGH CVSS: 7.5 Published: 1999-12-31 Modified: 2026-06-16

Description

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."

Affected Platforms

Microsoft Excel

Weakness Type

NVD-CWE-Other

References