CVE-2003-0664: Microsoft Word

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.

Affected products

• Microsoft Word: version 97 only; version 98 only; version 2000 only; version 2002 only
• Microsoft Works: version 2001 only; version 2002 only; version 2003 only

Published 2003-10-20. Last modified 2026-06-16.