GCVE - cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*

part: a version: 2003 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Word (`fed6abb9-31ef-57e0-8892-46b0e83ba7d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6801`	vulnerable	2026-06-08 05:05:06.977144	Details available Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue. Published: 2013-11-16T15:00:00.000Z Updated: 2024-09-16T19:55:56.309Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2013-11/0038.html http://archives.neohapsis.com/archives/bugtraq/2013-11/0045.html http://archives.neohapsis.com/archives/bugtraq/2013-11/0035.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2752`	vulnerable	2026-06-08 04:50:32.046260	Details available Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information. Published: 2008-06-18T19:29:00.000Z Updated: 2024-08-07T09:14:14.645Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/43155 http://www.nullcode.com.ar/ncs/crash/video2.htm http://www.nullcode.com.ar/ncs/crash/video.htm http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-2.doc http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-1.doc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1092`	vulnerable	2026-06-08 04:50:18.878487	Details available Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026. Published: 2008-03-25T16:00:00.000Z Updated: 2024-08-07T08:08:57.375Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019686 http://www.kb.cert.org/vuls/id/936529 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028 https://exchange.xforce.ibmcloud.com/vulnerabilities/41380 http://marc.info/?l=bugtraq&m=121129490723574&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1202`	vulnerable	2026-06-08 04:49:41.644734	Details available Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability." Published: 2007-05-08T23:00:00.000Z Updated: 2024-08-07T12:50:34.731Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/468871/100/200/threaded http://www.securitytracker.com/id?1018013 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525 http://www.securityfocus.com/archive/1/468871/100/200/threaded http://www.vupen.com/english/advisories/2007/1709	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.