CVE-2003-0347

Microsoft Visual Basic for Applications SDK 5.0-6.3 - Remote Code Execution via Long ID Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0347. PoCs published by eEye Digital Security Team.

AI-analyzed exploit summary This is a writeup describing a buffer overflow vulnerability in Microsoft Visual Basic for Applications (CVE-2003-0347). It provides steps to manually craft a malformed document to trigger an access violation, but does not include executable exploit code.

Description

Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by eEye Digital Security Team · textremotewindows

https://www.exploit-db.com/exploits/23094

View Code ZIP pw:eip

This is a writeup describing a buffer overflow vulnerability in Microsoft Visual Basic for Applications (CVE-2003-0347). It provides steps to manually craft a malformed document to trigger an access violation, but does not include executable exploit code.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: Microsoft Visual Basic for Applications (VBA) in Microsoft Office

No auth needed

Prerequisites: Microsoft Office with VBA support · Ability to modify a .doc file with a binary editor

MITRE ATT&CK