Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
CWE-284, NVD-CWE-noinfo