- Description
- Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Source
- secure@microsoft.com
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
- nvd@nist.gov
- CWE-20
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08AF794A-435D-4171-9DBB-EB7FAED96DBA"
},
{
"criteria": "cpe:2.3:a:microsoft:office:2010:*:x32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AC0BEF9-2417-48C5-BC95-F95F41F08795"
},
{
"criteria": "cpe:2.3:a:microsoft:office:2010:*:x64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C60D2557-347B-41BD-91D5-A51C88630B73"
},
{
"criteria": "cpe:2.3:a:microsoft:office:2010:sp1:x32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C91F1A74-BE24-4EF7-8E3B-E5E6448E7E40"
},
{
"criteria": "cpe:2.3:a:microsoft:office:2010:sp1:x64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8239CEF1-BD02-4ACE-A0C2-75A9EAA15914"
}
],
"operator": "OR"
}
]
}
]