Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Weakness
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 365_apps | Microsoft | - (including) | - (including) |
| Office | Microsoft | 2019 (including) | 2019 (including) |
| Office_long_term_servicing_channel | Microsoft | 2021 (including) | 2021 (including) |
| Office_long_term_servicing_channel | Microsoft | 2024 (including) | 2024 (including) |
| Sharepoint_enterprise_server | Microsoft | 2016 (including) | 2016 (including) |
| Sharepoint_server | Microsoft | 2019 (including) | 2019 (including) |
| Word | Microsoft | 2016 (including) | 2016 (including) |