Skip to content
OpenAdvisories
High · 7.8 Known exploited CVE-2012-2539 EUVD-2012-2525GHSA-x5wq-5f2r-gxw5

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 a…

Published Dec 12, 2012 · Updated Oct 22, 2025 · Assigned by microsoft

Description

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

References