CVE-2003-0347

CVE-2003-0347 describes a critical heap-based buffer overflow vulnerability in Microsoft Visual Basic for Applications (VBA) SDK versions 5.0 through 6.3, impacting products like Microsoft Office, Project, and Visio. This flaw allows remote attackers to execute arbitrary code by crafting a malicious document with an excessively long ID parameter. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists (EDB-23094), though there is no evidence of active exploitation or significant community discussion.