Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka "Word Bookmarks Vulnerability."

The remote Mac OS X host is running a version of Microsoft Office that is affected by multiple remote code execution vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Word, Excel, or Lotus 1-2-3 file, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

The remote Windows host is running a version of Microsoft Word or Word Viewer that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Word file, they could leverage this issue to execute arbitrary code subject to the user's privileges.

ID	Name	Product	Family	Severity
50068	MS10-079 / MS10-080 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2293194 / 2293211) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
49956	MS10-079: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2010-3216

high

Tenable Plugins

high

high