Local information disclosure via buffer over-read

Buffer over-read in Microsoft Office Word allows local users to disclose information through locally supplied input without authorization. Microsoft identifies an out-of-bounds read but has not published the affected parser, data structure, or malformed input that triggers it. Exploitation requires local access with no privileges or user interaction; Microsoft also records availability impact but does not identify a crash, hang, or other result.