Microsoft Word Multiple Vulnerabilities
Last Update Date:
10 Oct 2012 15:36
Release Date:
10 Oct 2012
4539
Views
RISK: High Risk
TYPE: Clients - Productivity Products
- Word PAPX Section Corruption Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Word handles specially crafted Word files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. - RTF File listid Use-After-Free Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Office handles specially crafted RTF files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft Office 2003
- Microsoft Office 2007
- Microsoft Office 2007
- Microsoft Office 2010
- Microsoft Word Viewer
- Microsoft Office Compatibility Pack
- Microsoft SharePoint Server 2010
- Microsoft Office Web Apps 2010
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/ms12-064
Vulnerability Identifier
Source
Related Link
Share with