Lucene search
HistoryOct 09, 2012 - 9:55 p.m.
CVE-2012-2550
microsoft works 9
remote code execution
denial of service
word .doc
heap memory corruption
cve-2012-2550
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.896 High
EPSS
Percentile
98.8%
Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word .doc file, aka “Works Heap Vulnerability.”
Affected configurations
Node
microsoftworksMatch9.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:works | microsoft works | eq | 9.0 |
Related
nessus
nessus
nvd
nvd
CVE-2012-2550
2012-10-09 21:55:02
securityvulns
securityvulns
Microsoft Works memory corruption
2012-10-09 00:00:00
prion
prion
Heap overflow
2012-10-09 21:55:00
checkpoint_advisories
checkpoint_advisories
Microsoft Works RTF Heap Remote Code Execution (MS12-065; CVE-2012-2550)
2012-10-09 00:00:00
cvelist
cvelist
CVE-2012-2550
2012-10-09 21:00:00
symantec
symantec
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.896 High
EPSS
Percentile
98.8%
Related for CVE-2012-2550