Live › vulnerability › CVE-2012-2539
Go to dashboardMicrosoft Word can be made to run attacker code or crash when it opens a specially crafted RTF file. An attacker who gets a victim to open the document can run code as that user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Word | vendor | – | – |
Unknown from the sources.
Apply the Microsoft security update for this CVE per vendor instructions, as CISA requires; the specific patch and affected Word versions are not in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2012-2539")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.