Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Microsoft Word 2002/Office 2004 Mac may run malicious code

CVE-2010-2747 · published 16 years ago
Summary

If someone sends a specially crafted Word document and a user opens it in Microsoft Word 2002 (SP3) on Windows or Office 2004 for Mac, the program could be tricked into running a harmful program chosen by the attacker. This could let the attacker take control of the computer or steal data. Install Microsoft’s security updates for these products or upgrade to a newer version, and avoid opening Word files from untrusted sources.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft office 2004
cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
microsoft word 2002
cpe:2.3:a:microsoft:word:2002:sp3:*:*:*:*:*:*
Original advisory text
Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a craf...
Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka "Word Uninitialized Pointer Vulnerability."
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
21% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published13 Oct 2010
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CVE-2010-2747 · NVD
Track software like this
Free during beta