CVE-2000-0854

CVE-2000-0854 describes a critical vulnerability in Microsoft Office 2000 where the application prioritizes the document's directory when searching for DLLs like riched20.dll and msi.dll. This allows an attacker to execute arbitrary commands by placing a malicious DLL in the same directory as a legitimate Office document. With a CVSS score of 10.0 (HIGH), this vulnerability is easily exploitable over a network with low complexity and no authentication, leading to complete compromise of confidentiality, integrity, and availability. While not currently on the KEV catalog, an exploit for Windows NT 4.0/2000 DLL search path issues exists on ExploitDB, indicating potential for exploitation. Despite its age, the high EPSS and FAUCET Risk Score suggest a significant threat, though there is no recorded active exploitation or community discussion.