← Back

CVE-2012-2539

nvd nist
Published: Dec 12, 2012Modified: Apr 22, 2026CISA KEV

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

Affected (9)

Microsoft
5 products
Office Compatibility Pack
Office Web Apps
Office Word Viewer
Sharepoint Server
Word
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Office Compatibility Pack
All versions
Office Compatibility Pack
All versions
Office Web Apps
Version 2010 sp1
Office Word Viewer
All versions
Sharepoint Server
Version 2010
Microsoft
Word
Version 2003 sp3
Word
Version 2007 sp2
Word
Version 2007 sp3
Word
Version 2010 sp1

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (7)

Source: secure@microsoft.com
Third Party AdvisoryUS Government Resource
Source: secure@microsoft.com
PatchVendor Advisory
Source: secure@microsoft.com
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.