<< Back
CVE Number Vulnerability Product Severity Date
MS12-029 Vulnerability in Microsoft Word Could Allow Remote Code Execution (2680352) Microsoft Office Critical 09-05-2012

Technical Information

Brief overview of the risk:
This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user opens a specially crafted RTF file.
Detailed Information on the risk:

A remote code execution vulnerability exists in the way that affected Microsoft Office software parses specially crafted Rich Text Format (RTF) data. An attacker who successfully exploited this vulnerability could take complete control of an affected system.


Further information on this exploit is available at : MS12-029

Affected Software

Microsoft Office 2003 Service Pack 3 (Microsoft Word 2003 Service Pack 3)
Microsoft Office 2007 Service Pack 2
Microsoft Office 2007 Service Pack 3
Microsoft Office 2008 for Mac
Microsoft Office for Mac 2011
Microsoft Office Compatibility Pack Service Pack 2
Microsoft Office Compatibility Pack Service Pack 3