Unscored CVE-2012-2524 EUVD-2012-2510GHSA-f7rw-4wx7-r7g2

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corru…

Published Aug 15, 2012 · Updated Oct 9, 2026 · Assigned by microsoft

Description

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."

References

oval:org.mitre.oval:def:15702 vdb-entry signature
TA12-227A third-party-advisory
MS12-057 vendor-advisory