Title

Microsoft Office Word Remote Code Execution Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Office Word. To exploit this vulnerability, an attacker would entice a user to open a malicious RTF-formatted file hosted on a web site or sent via email. If successfully exploited, this vulnerability would allow an attacker to corrupt system memory and execute arbitrary code on the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-35492

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.