Microsoft Office Word OLE2Link OLE Object Exploit Update

This module exploits a vulnerability in Microsoft Office Word. The flaw is related in how Microsoft Word handles OleLink objects. It is possible to open a RTF file and execute arbitrary code in vulnerables installations of Microsoft Office Word.



This vulnerability was originally seen being exploited in the wild starting in October 2016.



This module adds support for Microsoft Office 2010, Microsoft Office 2013 and Microsoft Office 2016.