CVE-2004-0963

CVE-2004-0963 describes a critical buffer overflow vulnerability in Microsoft Word 2002 SP3, and potentially other versions. This flaw allows remote attackers to trigger a denial of service or execute arbitrary code by crafting malicious .doc files containing unexpected values that lead to out-of-bounds memory access or large memory copies due to integer conversion errors. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low complexity, and complete impact on confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.