CVE-2012-2539: Microsoft Word Remote Code Execution Vulnerability

First published: Wed Dec 12 2012(Updated: )

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

Credit: secure@microsoft.com secure@microsoft.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/description
• agent/title
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/severity
• agent/remedy
• agent/weakness
• agent/author
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/first-publish-date
• exploited/true
• collector/cisa-known-exploited
• source/CISA
• agent/references
• agent/tags
• agent/softwarecombine
• agent/event
• collector/nvd-cve
• vendor/microsoft
• canonical/microsoft office compatibility pack
• version/microsoft office compatibility pack/sp2
• version/microsoft office compatibility pack/sp3
• canonical/microsoft office web apps
• version/microsoft office web apps/2010-sp1
• canonical/microsoft office word viewer
• canonical/microsoft word
• version/microsoft word/2003-sp3
• version/microsoft word/2007-sp2
• version/microsoft word/2007-sp3
• version/microsoft word/2010-sp1
• canonical/microsoft sharepoint server
• version/microsoft sharepoint server/2010