CVE-2013-3851: Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word...

Security readout for executives and security teams

This is an old Microsoft Word/Office memory corruption flaw. A malicious Office document could let an attacker run code or crash the application on vulnerable Office 2003/2007-era systems. Business risk is concentrated where legacy Office, Word Viewer, or the Office Compatibility Pack still exist. Exposure is most likely on legacy Windows endpoints or servers that still have Office 2003/2007, Word 2003/2007, Word Viewer, or the Office Compatibility Pack installed and process untrusted Office documents. Treat as high priority if legacy Microsoft Office remains in the environment. If inventory confirms these products are absent, priority drops to documentation and continuous asset validation. Mitigation focus: Apply the Microsoft MS13-072 security update where applicable.; Remove unsupported Office 2003/2007-era components where business use no longer requires them.; Restrict legacy Office applications from opening untrusted external documents..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.