A newly reported vulnerability in Word is limited to DoS attacks and does not allow remote code execution, according to Microsoft.