CVE-2004-0963

Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application…

published October 20, 2004

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

⚠️ A buffer overflow bug in Microsoft Word 2002 might sound vintage, but it could still crash your application like a surprise party gone wrong! 🎉 Think of it like a restaurant kitchen that suddenly serves a massive order without checking their supplies — one tiny mistake can cause chaos and overflow, leading to a big mess! In this case, unexpected values in a .doc file can lead to out-of-bounds memory access, causing Word to misbehave. This vulnerability could result in a denial of service, crashing Microsoft Word. Even worse, it might allow attackers to execute arbitrary code, leading to unauthorized access or control over your system. An attacker could potentially manipulate documents sent through email, turning a simple file into a weapon.

Put simply

Think of it like a restaurant kitchen that suddenly serves a massive order without checking their supplies — one tiny mistake can cause chaos and overflow, leading to a big mess! In this case, unexpected values in a .doc file can lead to out-of-bounds memory access, causing Word to misbehave. This buffer overflow occurs due to unexpected values in a .doc file that trigger out-of-bounds memory access and large memory copying, particularly stemming from an integer conversion error. Such flaws can allow remote attackers to manipulate the application unexpectedly.

What to do

This vulnerability could result in a denial of service, crashing Microsoft Word. Even worse, it might allow attackers to execute arbitrary code, leading to unauthorized access or control over your system. An attacker could potentially manipulate documents sent through email, turning a simple file into a weapon. To mitigate this issue, ensure that you're using the latest version of Microsoft Word and apply any available security updates. Regularly audit your software for vulnerabilities, especially legacy applications like Word 2002, which may still be in use. Consider moving to more modern tools if possible. You've got this! Stay vigilant and keep your software updated to lock down your security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32429 · 98.3th percentile
Published
2004-10-20T04:00Z
EPSS history
Timeline
  • 20 OCT 04:00Z
    Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application…
    cvelistv5