CVE-2010-3216

Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger…

published October 13, 2010

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

⚠️ A seemingly harmless Word document might be hiding a nasty surprise! Just a few crafted bookmarks can lead to serious chaos. 🔥 Think of it like a restaurant menu that gets you a meal you didn’t order—what’s written on the paper is entirely misleading, and you end up with a dish that can make you really sick! With the Word Bookmarks Vulnerability, an attacker could sneak in a malicious document that executes arbitrary code on your machine. This means they could potentially steal your data or take control of your system without you even realizing it!

Put simply

Think of it like a restaurant menu that gets you a meal you didn’t order—what’s written on the paper is entirely misleading, and you end up with a dish that can make you really sick! This vulnerability arises from how Microsoft Word 2002 SP3 and Office 2004 for Mac handle bookmarks, leading to memory corruption through invalid pointers. An attacker can exploit this flaw simply by enticing a user to open a specially crafted document.

What to do

With the Word Bookmarks Vulnerability, an attacker could sneak in a malicious document that executes arbitrary code on your machine. This means they could potentially steal your data or take control of your system without you even realizing it! To mitigate this issue, ensure you're using the latest updates for Microsoft Word and Office. Consider disabling macros, and avoid opening suspicious documents from untrusted sources. Regularly back up your data to minimize potential loss. You've got this! By staying cautious and following these steps, you'll keep your system safe and secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20463 · 97.5th percentile
Published
2010-10-13T18:00Z
EPSS history
Timeline
  • 13 OCT 18:00Z
    Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger…
    cvelistv5