CVE-2012-2528 Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 201...
HighCVSS 9.3
EPSS 22.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka "RTF File listid Use-After-Free Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft word automation services | All versions | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft office web apps | = 2010-sp1 | No fix listed |
| Microsoft word | = 2003-sp3 | No fix listed |
| Microsoft word | = 2007-sp2 | No fix listed |
| Microsoft word | = 2007-sp3 | No fix listed |
| Microsoft word | = 2010-sp1 | No fix listed |
| Microsoft word viewer | All versions | No fix listed |
References
- 55781 third-party-advisory vdb-entry
- TA12-283A third-party-advisory us-government-resource
- MS12-064 vendor-advisory
- oval:org.mitre.oval:def:15680 signature vdb-entry