CVE-2003-0820: Microsoft Word

High severity, CVSS 7.5. EPSS: 26.3% chance of exploitation in the next 30 days.

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.

Affected products

• Microsoft Word: version 97 only; version 98 only; version 2000 only; version 2002 only
• Microsoft Works: version 2001 only; version 2002 only; version 2003 only; version 2004 only

Published 2003-12-15. Last modified 2026-06-16.