Vulnerability in Microsoft Office
CVE-2003-0347
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
EPSS: 0.549 (98.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office — versions 2000, xp
- Microsoft Project — versions 2000, 2002
- Microsoft Visio — versions 2002
- Microsoft Visual_basic — versions 5.0, 6.2, 6.3
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)