CVE-2012-0183

Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute…

published May 9, 2012

CVSS
—
EPSS
24%
Percentile
97.9
In the wild
Unconfirmed
What it is

🚨 A simple crafted RTF document can trigger this vulnerability in older versions of Microsoft Word, potentially giving attackers the keys to your digital castle! Think of this vulnerability like a restaurant where a customer can slip in a fake order that the kitchen takes seriously — suddenly, the chef is cooking up a dish that could cause chaos, instead of just serving dinner. 🍽️ If exploited, this RTF mismatch vulnerability can lead to an attacker executing arbitrary code or causing a denial of service. It's like a rogue chef in the kitchen, messing with recipes and creating a culinary disaster! Your documents could be turned into a playground for malicious actions, potentially leading to data theft or system crashes.

Put simply

Think of this vulnerability like a restaurant where a customer can slip in a fake order that the kitchen takes seriously — suddenly, the chef is cooking up a dish that could cause chaos, instead of just serving dinner. 🍽️ The vulnerability exists in Microsoft Word due to improper handling of crafted RTF data, allowing attackers to trigger memory corruption. This can lead to the execution of malicious code when the document is opened.

What to do

If exploited, this RTF mismatch vulnerability can lead to an attacker executing arbitrary code or causing a denial of service. It's like a rogue chef in the kitchen, messing with recipes and creating a culinary disaster! Your documents could be turned into a playground for malicious actions, potentially leading to data theft or system crashes. To protect yourself, ensure you upgrade to the latest versions of Microsoft Word and Office. Disable the opening of RTF files from untrusted sources and educate users about the risks of opening suspicious documents. Regularly check for security patches and updates! You've got this! By staying proactive and following these steps, you can keep your system safe and secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24412 · 97.9th percentile
Published
2012-05-09T00:00Z
EPSS history
Timeline
  • 09 MAY 00:00Z
    Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute…
    cvelistv5