Description
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 24 Mar 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.