CVE-2011-1982: Input Validation
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1982?
CVE-2011-1982 has a severity rating that indicates a high risk due to its potential to allow remote code execution.
How do I fix CVE-2011-1982?
To fix CVE-2011-1982, apply the latest security updates released by Microsoft for affected versions of Office.
What versions of Microsoft Office are affected by CVE-2011-1982?
CVE-2011-1982 affects Microsoft Office 2007 SP2, and Office 2010 Gold and SP1 for both x32 and x64 architectures.
What type of attack does CVE-2011-1982 facilitate?
CVE-2011-1982 facilitates remote code execution attacks through crafted Word documents.
Is CVE-2011-1982 a local or remote vulnerability?
CVE-2011-1982 is classified as a remote vulnerability that allows execution of arbitrary code.