PT-2012-2381 · Microsoft · Office For Mac+3

Published 2012-05-08 · Updated 2018-10-12 · CVE-2012-0183

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2003 SP3, 2007 SP2, 2007 SP3 Microsoft Office for Mac versions 2008, 2011 Office Compatibility Pack versions SP2, SP3

Description A remote code execution issue exists due to the way Microsoft Office software parses specially crafted Rich Text Format (RTF) data. This could allow an attacker to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with fewer user rights on the system compared to those operating with administrative user rights.

Recommendations For Microsoft Office 2003 SP3, update to a version that is not affected by this issue. For Microsoft Office 2007 SP2 and SP3, update to a version that is not affected by this issue. For Microsoft Office for Mac 2008 and 2011, update to a version that is not affected by this issue. For Office Compatibility Pack SP2 and SP3, update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of RTF data in Microsoft Office until a patch is available.

Fix

Related Identifiers

CVE-2012-0183

ZDI-12-186

Affected Products

Office

Office For Mac

Office Compatibility Pack

Office Word

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2012-0183 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-029 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0183 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-186 · Security Note
• http://us-cert.gov/cas/techalerts/TA12-129A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-029 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15327 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0183 · Note
• http://secunia.com/advisories/49111 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75122 · Note
• http://securitytracker.com/id?1027035 · Note
• http://securityfocus.com/bid/53344 · Note