CVE-2003-0664

High

Description

Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.

SeverityHigh

CVSS7.5

Exploit probability91. percentile4.1%

Product

Microsoft Word

PublishedOct 20, 2003

First seenOct 20, 2003

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035

Affected products

Product	Affected versions	Fixed in
microsoft word	97, 98, 2000, 2002	—
microsoft works	2001, 2002, 2003	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.