CVE-2011-1982

Published Sep 15, 2011

Last updated 6 years ago

Overview

Description: Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
Source: secure@microsoft.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2010:*:x32:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9AC0BEF9-2417-48C5-BC95-F95F41F08795"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2010:*:x64:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C60D2557-347B-41BD-91D5-A51C88630B73"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2010:sp1:x32:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C91F1A74-BE24-4EF7-8E3B-E5E6448E7E40"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2010:sp1:x64:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8239CEF1-BD02-4ACE-A0C2-75A9EAA15914"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References