CVE-2010-3200: MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NU...

Security readout for executives and security teams

A malicious Word document can crash Microsoft Word 2003 SP3 by triggering a null pointer dereference in MSO.dll. The known impact is denial of service, not data theft or code execution. Business urgency depends on whether Word 2003 is still used to open untrusted documents. Exposure is likely limited to environments still running Microsoft Word 2003 SP3 11.8326.11.8324 or equivalent MSO.dll builds that open attacker-supplied Word documents. Prioritize discovery first. If Word 2003 is absent, business risk is low. If present in document-heavy workflows, reduce exposure because a crafted document could disrupt users and signal broader legacy Office risk. Mitigation focus: Inventory systems for Microsoft Word 2003 SP3 and MSO.dll version 11.8326.11.8324.; Check Microsoft or vendor guidance for any applicable update or workaround.; Restrict opening untrusted Word documents on affected legacy systems..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.