critical10.0Public exploit code
CVE-2003-0347
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Visual Basic For Applications SDK 5.0/6.0/6.2/6.3 - Document Handling Buffer Overrun2003-09-03 · remote · windows · Verified
Impact
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Office | Versions 2000, xp |
| Microsoft | Project | Versions 2000, 2002 |
| Microsoft | Visio | Version 2002 |
| Microsoft | Visual Basic | Versions 5.0, 6.2, 6.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0093.html
- http://marc.info/?l=bugtraq&m=106262077829157&w=2
- http://secunia.com/advisories/9666
- http://www.kb.cert.org/vuls/id/804780
- http://www.securityfocus.com/bid/8534
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-037
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0093.html
- http://marc.info/?l=bugtraq&m=106262077829157&w=2
- http://secunia.com/advisories/9666
- http://www.kb.cert.org/vuls/id/804780
- http://www.securityfocus.com/bid/8534
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-037