What’s Vulnerable › Vulnerabilities
CVE-2003-0820
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 26.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2003-12-15 · updated 2026-06-16
Description
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Affected products
- Microsoft Word for Android: 97, 97-sr1, 97-sr2, 98, 98-sr1, 98-sr2 (+8)
- Microsoft Works: 2001, 2002, 2003, 2004
References
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html
- http://www.security.nnov.ru/search/document.asp?docid=5243
- http://www.securityfocus.com/bid/8835
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13682
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html
- http://www.security.nnov.ru/search/document.asp?docid=5243
- http://www.securityfocus.com/bid/8835
Get alerted when CVE-2003-0820 or the next vulnerability affects your stack