CVE-2010-3200: Microsoft Word

Medium severity, CVSS 4.3. EPSS: 10.6% chance of exploitation in the next 30 days.

MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a crafted buffer in a Word document, as demonstrated by word_crash_11.8326.8324_poc.doc.

Affected products

• Microsoft Word: version 2003 only

Published 2010-09-20. Last modified 2026-06-16.