CVE-2012-2539KEV · OVERDUE

Microsoft Word Remote Code Execution Vulnerability

High · published December 12, 2012

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.0th percentile for exploit probability.

1649
days past CISA
deadline
CVSS v3.1
7.8
EPSS
53%
Percentile
99.0
In the wild
Confirmed
What it is

🚨 A single crafted RTF file can unleash chaos, executing arbitrary code in Microsoft Word like a magician pulling a rabbit out of a hat! 🔥 Think of this vulnerability like a sneaky delivery driver who opens the wrong package at your doorstep—once inside, they can pull out whatever they please without anyone checking the contents! An attacker can take complete control of your system, leading to potential data theft, system compromise, or even a complete crash. This is absolutely devastating for anyone still using these affected versions!

Put simply

Think of this vulnerability like a sneaky delivery driver who opens the wrong package at your doorstep—once inside, they can pull out whatever they please without anyone checking the contents! This vulnerability allows attackers to exploit memory corruption issues via specially crafted RTF data, enabling remote code execution in vulnerable versions of Microsoft Word and associated tools.

What to do

An attacker can take complete control of your system, leading to potential data theft, system compromise, or even a complete crash. This is absolutely devastating for anyone still using these affected versions! Immediately patch your systems to the latest updates—Microsoft has provided fixes for affected versions. If you can't upgrade, consider disabling RTF support or implementing strict email filtering to block potentially harmful files. You've got this! Take action now and secure your systems like the superhero you are! 🦸

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.53033 · 99.0th percentile
Published
2012-12-12T00:00Z
KEV added
2022-03-28 · due 2022-04-18
EPSS history
Timeline
  • 28 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 18
    kev
  • 12 DEC 00:00Z
    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote…
    cvelistv5