CVE-2012-0183

Microsoft Word/Office 2003-2011 Remote Code Execution via Crafted RTF

Title source: llm
STIX 2.1

Description

Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53344
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027035
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15327
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA12-129A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75122
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49111

Scores

EPSS 0.2441
EPSS Percentile 97.7%

Details

Status published
Products (4)
microsoft/office 2008
microsoft/office_compatibility_pack (2 CPE variants)
microsoft/word 2003 sp3
microsoft/word 2007 sp2 (2 CPE variants)
Published May 09, 2012
Tracked Since Feb 18, 2026