CVEvulnerability
CVE-2011-1982
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-09-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
Affected configurations
• microsoft office 2007
• microsoft office 2010
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.kb.cert.org/vuls/id/909022 US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA11-256A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12243 oval.cisecurity.org
- http://www.kb.cert.org/vuls/id/909022 US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA11-256A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12243 oval.cisecurity.org