Unscored severity · published Oct 9, 2012
CVE-2012-0182
Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted…
–
CVSS
68.3%
EPSS
No
On KEV
Description
Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)68.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Word · Microsoft
2007; 2007 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0182
www.securityfocus.com
http://www.securityfocus.com/bid/55780
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-283A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-064
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15426
More from Word
8.8
CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability
8.8
CVE-2015-2424
Microsoft PowerPoint Memory Corruption Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
8.8
CVE-2006-2492
Microsoft Word Malformed Object Pointer Vulnerability
7.8
CVE-2018-0802
Microsoft Office Memory Corruption Vulnerability