7.5

CVE-2003-0820

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Word Version97
Microsoft ≫ Word Version97 Langja
Microsoft ≫ Word Version97 Langko
Microsoft ≫ Word Version97 Langzh
Microsoft ≫ Word Version97 Updatesr1
Microsoft ≫ Word Version97 Updatesr2
Microsoft ≫ Word Version98
Microsoft ≫ Word Version98 Langja
Microsoft ≫ Word Version98 Langko
Microsoft ≫ Word Version98 Langzh
Microsoft ≫ Word Version98 Updatesr1 Langja
Microsoft ≫ Word Version98 Updatesr2 Langja
Microsoft ≫ Word Version2000
Microsoft ≫ Word Version2000 Langja
Microsoft ≫ Word Version2000 Langko
Microsoft ≫ Word Version2000 Langzh
Microsoft ≫ Word Version2000 Updatesp2
Microsoft ≫ Word Version2000 Updatesp3
Microsoft ≫ Word Version2000 Updatesr1
Microsoft ≫ Word Version2000 Updatesr1a
Microsoft ≫ Word Version2002
Microsoft ≫ Word Version2002 Updatesp1
Microsoft ≫ Word Version2002 Updatesp2
Microsoft ≫ Works Version2001
Microsoft ≫ Works Version2002
Microsoft ≫ Works Version2003
Microsoft ≫ Works Version2004
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 17.47% 0.948
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.securityfocus.com/bid/8835
Patch
Third Party Advisory
Vendor Advisory
VDB Entry