Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.