Unscored severity · published May 9, 2012
CVE-2012-0143
Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted…
–
CVSS
22.4%
EPSS
No
On KEV
Description
Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)22.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2008 · source: NVD
EX
Excel · Microsoft
2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0143
secunia.com
http://secunia.com/advisories/49112
www.securityfocus.com
http://www.securityfocus.com/bid/53374
www.securitytracker.com
http://www.securitytracker.com/id?1027041
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-129A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-030
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15064
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability