CVE-2003-0820
Status: ModifiedHigh (7.5)—
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Base score: 7.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 26%
- Percentile among all scored CVEs: 98
- Score date: 10/10/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- NVD-CWE-Other
References
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html
- http://www.security.nnov.ru/search/document.asp?docid=5243
- http://www.securityfocus.com/bid/8835
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13682
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html
- http://www.security.nnov.ru/search/document.asp?docid=5243
- http://www.securityfocus.com/bid/8835
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13682
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668
Raw JSON (NVD)
Show
{
"id": "CVE-2003-0820",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": true,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2003-12-15T05:00:00.000",
"references": [
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.security.nnov.ru/search/document.asp?docid=5243",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/8835",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13682",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.security.nnov.ru/search/document.asp?docid=5243",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/8835",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13682",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A336",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A585",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A586",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A668",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the \"Macro names\" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack."
},
{
"lang": "es",
"value": "Micrososft Word 97, 98(J), 2000 y 2002, y Micrososft Works Suites 2001 a 2004, no comprueban adecuadamente la longitud de valor de datos \"Macro Names\", lo que podría permitir a atacantes remotos ejecutar código arbitrario mediante un ataque de desbordamiento de búfer."
}
],
"lastModified": "2026-06-16T22:02:53.963",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "645B78F8-9AD7-4707-9CAD-5DC79475D971"
},
{
"criteria": "cpe:2.3:a:microsoft:word:97:*:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1695DE97-5840-4670-A891-F0E9F78A4FEA"
},
{
"criteria": "cpe:2.3:a:microsoft:word:97:*:*:ko:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4D4CC44-E1EC-4C6E-A341-DFC6A2C1BE63"
},
{
"criteria": "cpe:2.3:a:microsoft:word:97:*:*:zh:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "300D969F-7854-445D-8731-7B82E0C9DA18"
},
{
"criteria": "cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAC7BEA9-AA9B-4FFA-BC09-DD41F7E3EAC8"
},
{
"criteria": "cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "682961C4-A208-403F-8C3B-1E08F0414EDD"
},
{
"criteria": "cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E56F9283-7EE3-4F50-AFB6-09CDC06A5121"
},
{
"criteria": "cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B3A5E8E-CCE2-49AF-BAEB-549E3C67430B"
},
{
"criteria": "cpe:2.3:a:microsoft:word:98:*:*:ko:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7159E6F4-7AD3-43F1-ADB1-A563CD697E54"
},
{
"criteria": "cpe:2.3:a:microsoft:word:98:*:*:zh:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81B3F4F2-D2A3-47A9-838B-E49349079C63"
},
{
"criteria": "cpe:2.3:a:microsoft:word:98:sr1:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02667742-51C4-4E82-95A4-8DC96C2A0DDE"
},
{
"criteria": "cpe:2.3:a:microsoft:word:98:sr2:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9B97448-8172-4CA8-B639-7E503758E397"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:*:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEAF9432-B59D-43AB-B42D-3CDA2192ED6C"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:*:*:ko:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E2FB09D-03F1-464F-A302-0B32E4633C59"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:*:*:zh:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "413AAFEE-51E4-41F6-A63A-E2018BFB3002"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5947AFC8-483F-4597-AB8F-214356E857BD"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C426AFDD-870F-4CAD-9E93-636714984259"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEE7CC21-A458-49BB-B437-D5DF09339D83"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51A706AF-333A-4492-B947-A3BA2556F4D1"
},
{
"criteria": "cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B90E94C-839A-40B9-A408-6B396EB26102"
},
{
"criteria": "cpe:2.3:a:microsoft:works:2001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4ADD440-2CF5-4BC9-8C48-91CF8D5500BD"
},
{
"criteria": "cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17037BD9-742D-42E2-98CC-C764E6F71957"
},
{
"criteria": "cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B77363A-53A3-4CFC-87E0-B7D33445ACEF"
},
{
"criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}