CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
MS12-029 | Vulnerability in Microsoft Word Could Allow Remote Code Execution (2680352) | Microsoft Office | Critical | 09-05-2012 |
Technical Information
Brief overview of the risk:
This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user opens a specially crafted RTF file.
Detailed Information on the risk:
A remote code execution vulnerability exists in the way that affected Microsoft Office software parses specially crafted Rich Text Format (RTF) data. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
Further information on this exploit is available at : MS12-029
Affected Software
Microsoft Office 2003 Service Pack 3 (Microsoft Word 2003 Service Pack 3)Microsoft Office 2007 Service Pack 2
Microsoft Office 2007 Service Pack 3
Microsoft Office 2008 for Mac
Microsoft Office for Mac 2011
Microsoft Office Compatibility Pack Service Pack 2
Microsoft Office Compatibility Pack Service Pack 3