CVE-2012-0177

2012-04-1021:55:02

CWE-119

[email protected]

web.nvd.nist.gov

105

cve-2012-0177

buffer overflow

microsoft office

works file converter

nvd

vulnerability

code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.937 High

EPSS

Percentile

99.1%

JSON

Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka “Office WPS Converter Heap Overflow Vulnerability.”

Affected configurations

NVD

Node

microsoftofficeMatch2007sp2

microsoftworksMatch9.0

microsoftworks_6-9_file_converterMatch-

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2007
microsoft:worksmicrosoft workseq9.0
microsoft:works_6-9_file_convertermicrosoft works 6-9 file convertereq-