CVE-2003-0820

N/A Unknown

Published: December 15, 2003 Modified: April 16, 2026

Description

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html

Source: cve@mitre.org

Vendor Advisory

http://www.security.nnov.ru/search/document.asp?docid=5243

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/8835

Source: cve@mitre.org

Patch Third Party Advisory VDB Entry Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/13682

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668

Source: cve@mitre.org

Third Party Advisory

http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html