<< Back
CVE Number Vulnerability Product Severity Date
MS13-086 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084) Microsoft Word Important 09-10-2013

Technical Information

Brief overview of the risk:
This security update resolves two privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word or other affected Microsoft Office software.
Detailed Information on the risk:

A remote code execution vulnerability exists in the way that affected Microsoft Word software parses specially crafted files. An attacker who successfully exploited this vulnerability could take complete control of an affected system.


Further information on this exploit is available at : MS13-086

Affected Software

Microsoft Word 2003 Service Pack 3
Microsoft Word 2007 Service Pack 3