CVE-2003-0347 Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID....
HighCVSS 10.0
EPSS 54.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000 | No fix listed |
| Microsoft office | = 2000-sp2 | No fix listed |
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = xp | No fix listed |
| Microsoft office | = xp-sp1 | No fix listed |
| Microsoft office | = xp-sp2 | No fix listed |
| Microsoft project | = 2000 | No fix listed |
| Microsoft project | = 2002 | No fix listed |
| Microsoft visio | = 2002 | No fix listed |
| Microsoft visual basic | = 5.0 | No fix listed |
| Microsoft visual basic | = 6.2 | No fix listed |
| Microsoft visual basic | = 6.3 | No fix listed |
References
- 20030903 EEYE: VBE Document Property Buffer Overflow mailing-list
- 20030903 EEYE: VBE Document Property Buffer Overflow mailing-list
- 9666 third-party-advisory
- VU#804780 third-party-advisory us-government-resource
- 8534 exploit patch vdb-entry vendor-advisory
- MS03-037 vendor-advisory