{
  "id": "CVE-2003-0821",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2003-12-15T05:00:00.000",
  "lastModified": "2018-10-12T21:33:26.757",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model."
    },
    {
      "lang": "es",
      "value": "Microsoft Excel 97, 2000 y 2002 permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante una hoja de c\u00e1lculo con una macro XLM (Excel 4) que evita el modelo de seguridad de macros."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*",
              "matchCriteriaId": "645B78F8-9AD7-4707-9CAD-5DC79475D971"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:ja:*:*:*:*",
              "matchCriteriaId": "1695DE97-5840-4670-A891-F0E9F78A4FEA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:ko:*:*:*:*",
              "matchCriteriaId": "C4D4CC44-E1EC-4C6E-A341-DFC6A2C1BE63"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:97:*:*:zh:*:*:*:*",
              "matchCriteriaId": "300D969F-7854-445D-8731-7B82E0C9DA18"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*",
              "matchCriteriaId": "FAC7BEA9-AA9B-4FFA-BC09-DD41F7E3EAC8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*",
              "matchCriteriaId": "682961C4-A208-403F-8C3B-1E08F0414EDD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*",
              "matchCriteriaId": "E56F9283-7EE3-4F50-AFB6-09CDC06A5121"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*",
              "matchCriteriaId": "3B3A5E8E-CCE2-49AF-BAEB-549E3C67430B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:ko:*:*:*:*",
              "matchCriteriaId": "7159E6F4-7AD3-43F1-ADB1-A563CD697E54"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:98:*:*:zh:*:*:*:*",
              "matchCriteriaId": "81B3F4F2-D2A3-47A9-838B-E49349079C63"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:98:sr1:*:ja:*:*:*:*",
              "matchCriteriaId": "02667742-51C4-4E82-95A4-8DC96C2A0DDE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:98:sr2:*:ja:*:*:*:*",
              "matchCriteriaId": "B9B97448-8172-4CA8-B639-7E503758E397"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:ja:*:*:*:*",
              "matchCriteriaId": "DEAF9432-B59D-43AB-B42D-3CDA2192ED6C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:ko:*:*:*:*",
              "matchCriteriaId": "0E2FB09D-03F1-464F-A302-0B32E4633C59"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:zh:*:*:*:*",
              "matchCriteriaId": "413AAFEE-51E4-41F6-A63A-E2018BFB3002"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5947AFC8-483F-4597-AB8F-214356E857BD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "C426AFDD-870F-4CAD-9E93-636714984259"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*",
              "matchCriteriaId": "FEE7CC21-A458-49BB-B437-D5DF09339D83"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*",
              "matchCriteriaId": "8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "51A706AF-333A-4492-B947-A3BA2556F4D1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "4B90E94C-839A-40B9-A408-6B396EB26102"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:works:2001:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4ADD440-2CF5-4BC9-8C48-91CF8D5500BD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*",
              "matchCriteriaId": "17037BD9-742D-42E2-98CC-C764E6F71957"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B77363A-53A3-4CFC-87E0-B7D33445ACEF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
              "matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/9010",
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13681",
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A636",
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A675",
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A695",
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}