CVE-2010-3221

Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which…

published October 13, 2010

CVSS
—
EPSS
19%
Percentile
97.4
In the wild
Unconfirmed
What it is

🚨 A malformed Word document could let attackers execute code with just a click. This isn't just any typo; it’s like serving a recipe without checking the ingredients first! 🔥 Think of it as a restaurant that accepts any order without checking the kitchen for allergens. One wrong ingredient in a document could lead to catastrophic results, just like one unsafe dish could leave customers reeling. An attacker could take complete control of your computer by simply enticing you to open a malicious Word document. This could mean accessing sensitive files, installing malicious software, or even using your device for further attacks.

Put simply

Think of it as a restaurant that accepts any order without checking the kitchen for allergens. One wrong ingredient in a document could lead to catastrophic results, just like one unsafe dish could leave customers reeling. This vulnerability arises when Microsoft Word (2002 SP3, 2003 SP3, Office 2004 for Mac, and Word Viewer) processes a malformed record in a document. This flaw allows remote code execution due to memory corruption, making it easy for attackers to exploit it if you open a specially crafted file.

What to do

An attacker could take complete control of your computer by simply enticing you to open a malicious Word document. This could mean accessing sensitive files, installing malicious software, or even using your device for further attacks. To secure your systems, ensure that you are not using these outdated Word versions. If you are, upgrade to the latest supported version of Microsoft Office, and consider using protective measures like antivirus software and email filtering to catch potential threats. You've got this! By taking these steps, you can reduce your risk and keep your digital space safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19399 · 97.4th percentile
Published
2010-10-13T18:00Z
EPSS history
Timeline
  • 13 OCT 18:00Z
    Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which…
    cvelistv5