CVE-2012-2539

2012-12-1200:55:01

CWE-399

[email protected]

web.nvd.nist.gov

832

In Wild

microsoft

word

remote code execution

vulnerability

cve-2012-2539

nvd

rtf

memory corruption

8.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.782 High

EPSS

Percentile

98.3%

JSON

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka “Word RTF ‘listoverridecount’ Remote Code Execution Vulnerability.”

Affected configurations

NVD

Node

microsoftoffice_compatibility_packsp2

microsoftoffice_compatibility_packsp3

microsoftoffice_web_appsMatch2010sp1

microsoftoffice_word_viewer

microsoftwordMatch2003sp3

microsoftwordMatch2007sp2

microsoftwordMatch2007sp3

microsoftwordMatch2010sp1

CPENameOperatorVersion
microsoft:office_compatibility_packmicrosoft office compatibility packeq*
microsoft:office_web_appsmicrosoft office web appseq2010
microsoft:office_word_viewermicrosoft office word viewereq*
microsoft:wordmicrosoft wordeq2003
microsoft:wordmicrosoft wordeq2007
microsoft:wordmicrosoft wordeq2010

CPE	Name	Operator	Version
microsoft:office_compatibility_pack	microsoft office compatibility pack	eq	*
microsoft:office_web_apps	microsoft office web apps	eq	2010
microsoft:office_word_viewer	microsoft office word viewer	eq	*
microsoft:word	microsoft word	eq	2003
microsoft:word	microsoft word	eq	2007
microsoft:word	microsoft word	eq	2010