CVE-2003-0820: Buffer Overflow

First published: Tue Nov 18 2003(Updated: )

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Microsoft Word	=97-sr2
Microsoft Word	=2002-sp1
Microsoft Word	=2000
Microsoft Word	=2000-sr1a
Microsoft Word	=97-sr1
Microsoft Word	=98
Microsoft Works	=2001
Microsoft Word	=97
Microsoft Works	=2002
Microsoft Word	=98
Microsoft Word	=98
Microsoft Word	=2000
Microsoft Word	=2000-sp2
Microsoft Word	=97
Microsoft Word	=97
Microsoft Word	=98-sr2
Microsoft Word	=2002
Microsoft Word	=97
Microsoft Word	=98
Microsoft Word	=98-sr1
Microsoft Word	=2000-sp3
Microsoft Word	=2000-sr1
Microsoft Works	=2003
Microsoft Works	=2004
Microsoft Word	=2000
Microsoft Word	=2000
Microsoft Word	=2002-sp2

Remedy

http://www.securityfocus.com/bid/8835

Never miss a vulnerability like this again

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.