CVE-2012-0183
First published: Wed May 09 2012(Updated: )
Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2008 | |
| Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint | =sp2 | |
| Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint | =sp3 | |
| Microsoft Office Word | =2003-sp3 | |
| Microsoft Office Word | =2007-sp2 | |
| Microsoft Office Word | =2007-sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/49111
- http://www.securityfocus.com/bid/53344
- http://www.securitytracker.com/id?1027035
- http://www.us-cert.gov/cas/techalerts/TA12-129A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75122
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15327
Frequently Asked Questions
What is the severity of CVE-2012-0183?
CVE-2012-0183 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2012-0183?
To fix CVE-2012-0183, users should apply the latest patches and updates provided by Microsoft for their affected Office software.
Which versions are affected by CVE-2012-0183?
CVE-2012-0183 affects Microsoft Word 2003 SP3, 2007 SP2/SP3, Office 2008 and 2011 for Mac, and the Office Compatibility Pack SP2/SP3.
What type of attacks can CVE-2012-0183 facilitate?
CVE-2012-0183 can facilitate remote attacks that can execute arbitrary code or cause a denial of service.
What is the RTF Mismatch Vulnerability related to CVE-2012-0183?
The RTF Mismatch Vulnerability in CVE-2012-0183 refers to how crafted RTF data can lead to memory corruption and exploitation.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2008
- canonical/microsoft office compatibility pack for word, excel, and powerpoint
- version/microsoft office compatibility pack for word, excel, and powerpoint/sp2
- version/microsoft office compatibility pack for word, excel, and powerpoint/sp3
- canonical/microsoft office word
- version/microsoft office word/2003-sp3
- version/microsoft office word/2007-sp2
- version/microsoft office word/2007-sp3