CVE-2003-0664

Published: Oct 20, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.

Affected (16)

Products: Microsoft: Word, Works

Microsoft

2 products

Word

Works

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Microsoft Word	Version 2000
Microsoft Word	Version 2000 sp2
Microsoft Word	Version 2000 sp3
Microsoft Word	Version 2000 sr1
Microsoft Word	Version 2000 sr1a
Microsoft Word	Version 2002
Microsoft Word	Version 2002 sp1
Microsoft Word	Version 2002 sp2
Microsoft Word	Version 97
Microsoft Word	Version 97 sr1
Microsoft Word	Version 97 sr2
Microsoft Word	Version 98
Microsoft Word	Version 98
Microsoft Works	Version 2001
Microsoft Works	Version 2002
Microsoft Works	Version 2003

References (4)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A188

Source: cve@mitre.org

Third Party Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A188

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.