CVE-2004-0963: Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attac...

Security readout for executives and security teams

This is an old Microsoft Word file-parsing flaw. A malicious .doc file could crash Word and may allow code to run inside winword.exe. Business risk is concentrated on legacy endpoints that still use Word 2002 SP3 or possibly nearby affected versions. Likely exposure is legacy desktop environments running Microsoft Word 2002 SP3. The CVE text says possibly other versions, but the supplied bundle does not define a complete affected-version range. Prioritize if legacy Microsoft Office remains in use. For modern environments without Word 2002-era software, urgency is lower but still worth confirming through inventory. Mitigation focus: Review Microsoft MS05-023 and apply the vendor security update where applicable.; Inventory endpoints for Microsoft Word 2002 SP3 and related unsupported Office versions.; Remove or upgrade unsupported Office installations from business systems..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.