CVE-2003-0664: High severity Microsoft Word vulnerability

Published Sep 4, 2003
·
Updated

Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.

Affected Software

16 affected components
Microsoft Word=97-sr2
Microsoft Word=2002-sp1
Microsoft Word=2000
Microsoft Word=2000-sr1a
Microsoft Word=97-sr1
Microsoft Word=98
Microsoft Works=2001
Microsoft Word=97
Microsoft Works=2002
Microsoft Word=98
Microsoft Word=2002-sp2
Microsoft Word=2000-sp2
Microsoft Word=2000-sp3
Microsoft Works=2003
Microsoft Word=2000-sr1
Microsoft Word=2002

Event History

Sep 4, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Oct 20, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2003-0664?

CVE-2003-0664 has a critical severity rating due to its capability to allow arbitrary macro execution without user consent.

2

How do I fix CVE-2003-0664?

To fix CVE-2003-0664, ensure to apply the security updates released by Microsoft relevant to the affected versions of Word and Works.

3

What software versions are affected by CVE-2003-0664?

CVE-2003-0664 affects Microsoft Word versions 97, 2000, 2002, and Microsoft Works versions 2001, 2002, and 2003.

4

Can CVE-2003-0664 be exploited remotely?

Yes, CVE-2003-0664 can be exploited remotely through malicious documents that a user opens.

5

What are the potential impacts of exploiting CVE-2003-0664?

Exploiting CVE-2003-0664 can lead to unauthorized execution of macros, potentially compromising the system or data.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203