CVE-2012-0182

Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code…

published October 9, 2012

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
68%
Percentile
99.3
In the wild
Unconfirmed
What it is

⚠️ A crafty document could let an attacker take control! The Word PAPX Section Corruption Vulnerability in Microsoft Word 2007 SP2 and SP3 can execute arbitrary code just by opening a specially crafted file. 🔥 Think of it like a seemingly harmless package delivered to your front door. If you don't check what's inside before opening it, you might find a ticking time bomb instead of a birthday gift! If exploited, an attacker could gain full control over the system simply by getting a user to open a malicious Word document. This could lead to unauthorized data access, system manipulation, or even total compromise of the affected machine.

Put simply

Think of it like a seemingly harmless package delivered to your front door. If you don't check what's inside before opening it, you might find a ticking time bomb instead of a birthday gift! This vulnerability arises from improper memory handling during document parsing, allowing remote attackers to inject and execute arbitrary code within Microsoft Word.

What to do

If exploited, an attacker could gain full control over the system simply by getting a user to open a malicious Word document. This could lead to unauthorized data access, system manipulation, or even total compromise of the affected machine. To protect against this, users should ensure they are running the latest service packs and security updates for Microsoft Word. Regularly check for updates directly from Microsoft’s website and consider using document preview features to avoid opening unknown files directly. You've got this! By keeping your software updated, you're one step closer to being a security hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.68323 · 99.3th percentile
Published
2012-10-09T21:00Z
EPSS history
Timeline
  • 09 OCT 21:00Z
    Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code…
    cvelistv5