Lucene search

K
cve[email protected]CVE-2012-2524
HistoryAug 15, 2012 - 1:55 a.m.

CVE-2012-2524

2012-08-1501:55:01
CWE-119
web.nvd.nist.gov
96
microsoft office
cgm file
memory corruption
cve-2012-2524
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.714 High

EPSS

Percentile

98.1%

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka β€œCGM File Format Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftofficeMatch2007sp2
OR
microsoftofficeMatch2007sp3
OR
microsoftofficeMatch2010sp1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.714 High

EPSS

Percentile

98.1%