CVE-2012-2539highunder attackCWE-787

CVE-2012-2539

Published · Updated

Follow this CVE+ Monitor Microsoft Word

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.8epss 53%
from disclosure to weapon
Published on NVDDec 12
CISA KEV+3393d
Action required by CISAfederal deadline: 2022-04-18

Apply updates per vendor instructions.

In short

Microsoft Word versions 2003 through 2010 can crash or allow hackers to run malicious code when opening specially crafted Rich Text Format (RTF) files. This happens because the program doesn't properly check the file's data before processing it.

Technical detail

Out-of-bounds write vulnerability in RTF parsing of Microsoft Word 2003 SP3, 2007 SP2/SP3, 2010 SP1, Word Viewer, Office Compatibility Pack SP2/SP3, and Office Web Apps 2010 SP1. Remote attackers can trigger memory corruption via malicious 'listoverridecount' field in RTF documents, resulting in code execution or denial of service; requires user interaction (file opening).

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a