CVE-2011-1982 Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a....
HighCVSS 9.3
EPSS 27.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2007-sp2 | No fix listed |
| Microsoft office | = 2010 | No fix listed |
| Microsoft office | = 2010-sp1 | No fix listed |
References
- VU#909022 third-party-advisory us-government-resource
- TA11-256A third-party-advisory us-government-resource
- MS11-073 vendor-advisory
- oval:org.mitre.oval:def:12243 signature vdb-entry