CVE-2012-2539

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 53,0%

Kerentanan Out-of-bounds Write pada microsoft office compatibility pack, microsoft office web apps +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 28 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

Rincian

Terbit di NVD

12 Desember 2012

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

53,0% peluang dieksploitasi; lebih tinggi dari 98,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Word Remote Code Execution Vulnerability

Masuk KEV

28 Maret 2022

Tenggat CISA

18 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-079 patch · advisory vendor
• http://www.us-cert.gov/cas/techalerts/TA12-346A.html advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-2539 pemerintah AS
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16073 broken link