CVE-2012-0183 Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (mem...
HighCVSS 9.3
EPSS 24.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2008 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft word | = 2003-sp3 | No fix listed |
| Microsoft word | = 2007-sp2 | No fix listed |
| Microsoft word | = 2007-sp3 | No fix listed |
References
- 49111 third-party-advisory
- 53344 vdb-entry
- 1027035 vdb-entry
- TA12-129A third-party-advisory us-government-resource
- MS12-029 vendor-advisory
- microsoft-office-rtf-code-execution(75122) vdb-entry
- oval:org.mitre.oval:def:15327 signature vdb-entry