MS03-035 (CVE-2003-0663) Microsoft Word Macro Security Bypass Advisory

Vulnerability Key Information Vulnerability Summary Vulnerability ID: MS03-035 (CVE-2003-0663) Vulnerability Description: A flaw in Microsoft Word may allow macros to run automatically. Initial Release Date: September 3, 2003 Last Updated Date: November 24, 2003 Affected Software Versions: - Microsoft Word 97 - Microsoft Word 98 (J) - Microsoft Word 2000 - Microsoft Word 2002 - Microsoft Works Suite 2001 - Microsoft Works Suite 2002 - Microsoft Works Suite 2003 - Microsoft Works Suite 2004 Vulnerability Details Technical Description: - The vulnerability allows an attacker to create a document that, when opened in Microsoft Word, can automatically run unsigned macros, regardless of macro security settings. Mitigating Factors: - Users must actively open the malicious document; attackers cannot force automatic opening. - The vulnerability cannot propagate automatically via email; user interaction is required to open email attachments. - If the Outlook Email Security Update is installed, Outlook 98, 2000, and 2002 versions can prevent macros from accessing the address book. - The vulnerability affects only Microsoft Word and does not impact other Office components. Severity Rating All Affected Microsoft Word Versions: Important Frequently Asked Questions Scope of Impact: When a malicious document is opened, it may allow unsigned macros to run automatically. Root Cause: Word incorrectly checks for modifications to macro security attributes in documents. Macro Capabilities: Automatically running macros could lead to data modification, communication with websites, disk formatting, etc. Attack Vector: By tricking users into opening malicious documents, typically delivered via email. Patch Effect: Eliminates the vulnerability and restores proper macro security checks. Patch Availability Patch Download Links: - Word 2002: See download link - Word 2000: See download link - Word 97 and Word 98 (J): Visit support page - Recommendation: Use Office Update to automatically detect and install patches. (Note: Office 97 and Visio 2000 are exceptions and do not have direct support.) Additional Patch Information Installation Platforms: Can be installed on specific versions of other Office components. Future Patch Inclusion: This hotfix will be included in future service packs. No reboot required; uninstallable; no alternative patches available. Verification Method: Check the version number of WinWord.exe. Language Versions: Available in multiple language editions. Additional Resources Support and Security Information: Provides relevant links and technical support.

Goal Reached Thanks to every supporter — we hit 100%!

MS03-035 (CVE-2003-0663) Microsoft Word Macro Security Bypass Advisory