VulnerabilityModified
CVE-2003-0820
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
HIGH 7.5EPSS 25.7%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 25.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 25.73% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/word · microsoft/works
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.htmlVendor Advisory
- http://www.security.nnov.ru/search/document.asp?docid=5243Third Party Advisory
- http://www.securityfocus.com/bid/8835Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13682Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668Third Party Advisory
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.htmlVendor Advisory
- http://www.security.nnov.ru/search/document.asp?docid=5243Third Party Advisory
- http://www.securityfocus.com/bid/8835Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13682Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.