First published: Wed May 09 2012(Updated: )
Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office | =2008 | |
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint | =sp2 | |
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint | =sp3 | |
Microsoft Word for Android | =2003-sp3 | |
Microsoft Word for Android | =2007-sp2 | |
Microsoft Word for Android | =2007-sp3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0183 is classified as a critical vulnerability due to its potential for remote code execution.
To fix CVE-2012-0183, users should apply the latest patches and updates provided by Microsoft for their affected Office software.
CVE-2012-0183 affects Microsoft Word 2003 SP3, 2007 SP2/SP3, Office 2008 and 2011 for Mac, and the Office Compatibility Pack SP2/SP3.
CVE-2012-0183 can facilitate remote attacks that can execute arbitrary code or cause a denial of service.
The RTF Mismatch Vulnerability in CVE-2012-0183 refers to how crafted RTF data can lead to memory corruption and exploitation.