CVE-2003-0821

Опубликовано: 15 дек. 2003

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.

Ссылки

http://www.securityfocus.com/bid/9010
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
https://exchange.xforce.ibmcloud.com/vulnerabilities/13681
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695
Third Party Advisory
http://www.securityfocus.com/bid/9010
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050
https://exchange.xforce.ibmcloud.com/vulnerabilities/13681
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:97:*:*:ja:*:*:*:*

cpe:2.3:a:microsoft:word:97:*:*:ko:*:*:*:*

cpe:2.3:a:microsoft:word:97:*:*:zh:*:*:*:*

cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*

cpe:2.3:a:microsoft:word:98:*:*:ko:*:*:*:*

cpe:2.3:a:microsoft:word:98:*:*:zh:*:*:*:*

cpe:2.3:a:microsoft:word:98:sr1:*:ja:*:*:*:*

cpe:2.3:a:microsoft:word:98:sr2:*:ja:*:*:*:*

cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2000:*:*:ja:*:*:*:*

cpe:2.3:a:microsoft:word:2000:*:*:ko:*:*:*:*

cpe:2.3:a:microsoft:word:2000:*:*:zh:*:*:*:*

cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2001:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10981

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vfc8-9qjc-87vq

github

больше 3 лет назад