Oval Definition:
oval:org.mitre.oval:def:188
Revision Date
:
2016-02-19
Version
:
4
Title
:
MS Word Macro Security Bypass Vulnerability
Description
:
Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2003-0664
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s)
:
Microsoft Word 2000
Microsoft Word 2002
Microsoft Word 97
Definition Synopsis
Software section
Word 2000 is installed
AND
the version of winword.exe is less than 9.0.0.7924
OR
Microsoft Word 2002 is installed
AND
the version of Winword.exe is less than 10.0.5522.0
OR
Word 97 is installed
AND
the version of winword.exe is less than 8.0.0.9125
BACK