Summary
This host is missing a critical security update according to Microsoft Bulletin MS12-064.
Impact
Successful exploitation could allow attackers to execute arbitrary code by tricking a user into opening a specially crafted word and RTF files.
Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-064
Insight
- An error when parsing the PAPX section can be exploited to corrupt memory via a specially crafted Word file.
NOTE: This vulnerability affects Microsoft Word 2007 only.
- A use-after-free error exists when handling listid and can be exploited via a specially crafted RTF file.
Affected
Microsoft Word Viewer
Microsoft Office 2003 Service Pack 3
Microsoft Office 2007 Service Pack 2
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 Service Pack 1
Microsoft Office Web Apps 2010 Service Pack 1
Microsoft SharePoint Server 2010 Service Pack 1
Microsoft Office Compatibility Pack Service Pack 2 Microsoft Office Compatibility Pack Service Pack 3
References
- http://secunia.com/advisories/50835/
- http://support.microsoft.com/kb/2553488
- http://support.microsoft.com/kb/2598237
- http://support.microsoft.com/kb/2687314
- http://support.microsoft.com/kb/2687315
- http://support.microsoft.com/kb/2687401
- http://support.microsoft.com/kb/2687483
- http://support.microsoft.com/kb/2687485
- http://technet.microsoft.com/en-us/security/bulletin/ms12-064
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-0182, CVE-2012-2528 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Checks for MS HOTFIX for snmp buffer overruns
- Microsoft .NET Framework Remote Code Execution Vulnerability (2745030)
- Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)
- Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)
- Microsoft Active Directory Denial of Service Vulnerability (953235)