fkie_cve-2003-0821
Vulnerability from fkie_nvd
Published
2003-12-15 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
References
cve@mitre.orghttp://www.securityfocus.com/bid/9010Third Party Advisory, VDB Entry
cve@mitre.orghttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/13681Third Party Advisory, VDB Entry
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636Third Party Advisory
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675Third Party Advisory
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/9010Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/13681Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695Third Party Advisory
Impacted products
Vendor Product Version
microsoft word 97
microsoft word 97
microsoft word 97
microsoft word 97
microsoft word 97
microsoft word 97
microsoft word 98
microsoft word 98
microsoft word 98
microsoft word 98
microsoft word 98
microsoft word 98
microsoft word 2000
microsoft word 2000
microsoft word 2000
microsoft word 2000
microsoft word 2000
microsoft word 2000
microsoft word 2000
microsoft word 2000
microsoft word 2002
microsoft word 2002
microsoft word 2002
microsoft works 2001
microsoft works 2002
microsoft works 2003
microsoft works 2004


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*",
              "matchCriteriaId": "645B78F8-9AD7-4707-9CAD-5DC79475D971",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:ja:*:*:*:*",
              "matchCriteriaId": "1695DE97-5840-4670-A891-F0E9F78A4FEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:ko:*:*:*:*",
              "matchCriteriaId": "C4D4CC44-E1EC-4C6E-A341-DFC6A2C1BE63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:zh:*:*:*:*",
              "matchCriteriaId": "300D969F-7854-445D-8731-7B82E0C9DA18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*",
              "matchCriteriaId": "FAC7BEA9-AA9B-4FFA-BC09-DD41F7E3EAC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*",
              "matchCriteriaId": "682961C4-A208-403F-8C3B-1E08F0414EDD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*",
              "matchCriteriaId": "E56F9283-7EE3-4F50-AFB6-09CDC06A5121",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*",
              "matchCriteriaId": "3B3A5E8E-CCE2-49AF-BAEB-549E3C67430B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:ko:*:*:*:*",
              "matchCriteriaId": "7159E6F4-7AD3-43F1-ADB1-A563CD697E54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:zh:*:*:*:*",
              "matchCriteriaId": "81B3F4F2-D2A3-47A9-838B-E49349079C63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:98:sr1:*:ja:*:*:*:*",
              "matchCriteriaId": "02667742-51C4-4E82-95A4-8DC96C2A0DDE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:98:sr2:*:ja:*:*:*:*",
              "matchCriteriaId": "B9B97448-8172-4CA8-B639-7E503758E397",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:ja:*:*:*:*",
              "matchCriteriaId": "DEAF9432-B59D-43AB-B42D-3CDA2192ED6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:ko:*:*:*:*",
              "matchCriteriaId": "0E2FB09D-03F1-464F-A302-0B32E4633C59",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:zh:*:*:*:*",
              "matchCriteriaId": "413AAFEE-51E4-41F6-A63A-E2018BFB3002",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5947AFC8-483F-4597-AB8F-214356E857BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "C426AFDD-870F-4CAD-9E93-636714984259",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*",
              "matchCriteriaId": "FEE7CC21-A458-49BB-B437-D5DF09339D83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*",
              "matchCriteriaId": "8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "51A706AF-333A-4492-B947-A3BA2556F4D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "4B90E94C-839A-40B9-A408-6B396EB26102",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2001:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4ADD440-2CF5-4BC9-8C48-91CF8D5500BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*",
              "matchCriteriaId": "17037BD9-742D-42E2-98CC-C764E6F71957",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B77363A-53A3-4CFC-87E0-B7D33445ACEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
              "matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model."
    },
    {
      "lang": "es",
      "value": "Microsoft Excel 97, 2000 y 2002 permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante una hoja de c\u00e1lculo con una macro XLM (Excel 4) que evita el modelo de seguridad de macros."
    }
  ],
  "id": "CVE-2003-0821",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2003-12-15T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/9010"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13681"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/9010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13681"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.