Description
Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
References (2)
Core 2
Core References
Third Party Advisory vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A188
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035
Scores
EPSS
0.0413
EPSS Percentile
89.9%
Details
Status
published
Products (7)
microsoft/word
97 (3 CPE variants)
microsoft/word
98 (2 CPE variants)
microsoft/word
2000 (5 CPE variants)
microsoft/word
2002 (3 CPE variants)
microsoft/works
2001
microsoft/works
2002
microsoft/works
2003
Published
Oct 20, 2003
Tracked Since
Feb 18, 2026