Detections
Analytics

MS12-079: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)

high Nessus Plugin ID 63226

Language:

Synopsis

A Microsoft Office component installed on the remote host is affected by a remote code execution vulnerability.

Description

The version of Office, Office Compatibility Pack, Microsoft Word Viewer, Microsoft Office Web Apps, and/or Microsoft Share Point Server installed on the remote host has a remote code execution vulnerability. This is due to the way that Microsoft Office software parses RTF data and could allow an attacker to execute arbitrary code by tricking a user into opening a specially crafted RTF file.

Solution

Microsoft has released a set of patches for Office 2003, 2007, 2010, Office Compatibility Pack, Microsoft Word Viewer, Microsoft Office Web Apps and Microsoft SharePoint Server.

See Also

http://www.nessus.org/u?7072a349

Plugin Details

Severity: High

ID: 63226

File Name: smb_nt_ms12-079.nasl

Version: 1.15

Type: local

Agent: windows

Published: 12/11/2012

Updated: 3/29/2022

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.5

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2012-2539

Vulnerability Information

CPE: cpe:/a:microsoft:sharepoint_server, cpe:/a:microsoft:office_web_apps, cpe:/a:microsoft:office_compatibility_pack, cpe:/a:microsoft:word_viewer, cpe:/a:microsoft:word, cpe:/a:microsoft:office

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/11/2012

Vulnerability Publication Date: 12/11/2012

CISA Known Exploited Vulnerability Due Dates: 4/18/2022

Reference Information

CVE: CVE-2012-2539

BID: 56834