Detections
Analytics
CVE-2003-0820
critical
Description
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
References
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336
https://exchange.xforce.ibmcloud.com/vulnerabilities/13682
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
http://www.securityfocus.com/bid/8835
http://www.security.nnov.ru/search/document.asp?docid=5243
http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html