Lucene search
HistoryOct 20, 2003 - 4:00 a.m.
CVE-2003-0664
microsoft word
cve-2003-0664
macro security
arbitrary macros
document properties
7.2 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.3%
Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
Affected configurations
Node
microsoftwordMatch97
ORmicrosoftwordMatch97sr1
ORmicrosoftwordMatch97sr2
ORmicrosoftwordMatch98
ORmicrosoftwordMatch98ja
ORmicrosoftwordMatch2000
ORmicrosoftwordMatch2000sp2
ORmicrosoftwordMatch2000sp3
ORmicrosoftwordMatch2000sr1
ORmicrosoftwordMatch2000sr1a
ORmicrosoftwordMatch2002
ORmicrosoftwordMatch2002sp1
ORmicrosoftwordMatch2002sp2
ORmicrosoftworksMatch2001
ORmicrosoftworksMatch2002
ORmicrosoftworksMatch2003
Related
nessus
nessus
MS03-035: Word Macros may run automatically (827653)
2003-09-04 00:00:00
cvelist
cvelist
CVE-2003-0664
2003-09-04 04:00:00
nvd
nvd
CVE-2003-0664
2003-10-20 04:00:00
7.2 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.3%
Related for CVE-2003-0664