7.5

CVE-2003-0820

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Word Version 97
Microsoft ≫ Word Version 97 Lang ja
Microsoft ≫ Word Version 97 Lang ko
Microsoft ≫ Word Version 97 Lang zh
Microsoft ≫ Word Version 97 Update sr1
Microsoft ≫ Word Version 97 Update sr2
Microsoft ≫ Word Version 98
Microsoft ≫ Word Version 98 Lang ja
Microsoft ≫ Word Version 98 Lang ko
Microsoft ≫ Word Version 98 Lang zh
Microsoft ≫ Word Version 98 Update sr1 Lang ja
Microsoft ≫ Word Version 98 Update sr2 Lang ja
Microsoft ≫ Word Version 2000
Microsoft ≫ Word Version 2000 Lang ja
Microsoft ≫ Word Version 2000 Lang ko
Microsoft ≫ Word Version 2000 Lang zh
Microsoft ≫ Word Version 2000 Update sp2
Microsoft ≫ Word Version 2000 Update sp3
Microsoft ≫ Word Version 2000 Update sr1
Microsoft ≫ Word Version 2000 Update sr1a
Microsoft ≫ Word Version 2002
Microsoft ≫ Word Version 2002 Update sp1
Microsoft ≫ Word Version 2002 Update sp2
Microsoft ≫ Works Version 2001
Microsoft ≫ Works Version 2002
Microsoft ≫ Works Version 2003
Microsoft ≫ Works Version 2004
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 25.73% 0.977
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html
Vendor Advisory
http://www.security.nnov.ru/search/document.asp?docid=5243
Third Party Advisory
http://www.securityfocus.com/bid/8835
Patch
Third Party Advisory
Vendor Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
https://exchange.xforce.ibmcloud.com/vulnerabilities/13682
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668
Third Party Advisory