Description
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
References
- MS11-073 vendor-advisory
- oval:org.mitre.oval:def:12243 vdb-entry signature
- VU#909022 third-party-advisory
- TA11-256A third-party-advisory