ZeroDay Findings
Sign inSign up

Findings

CVE-2012-2539

Microsoft Word Remote Code Execution Vulnerability

Published Dec 11, 2012 · updated Jun 16, 2026 · microsoft office compatibility pack

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

Timeline

Detection, updates, and resolution for this record.

  1. Dec 11, 2012 · Catalog

    Detected

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

  2. Mar 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 18, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."

Required action

Apply updates per vendor instructions.

CISA due date Apr 18, 2022

Affected

  • cpe microsoft/office compatibility packversion unspecified
  • cpe microsoft/office web apps2010
  • cpe microsoft/office word viewerversion unspecified
  • cpe microsoft/sharepoint server2010
  • cpe microsoft/word2003
  • cpe microsoft/word2007
  • vendor Microsoft Wordversion unspecified

Sources

  • CISA KEVCVE-2012-2539

    Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

    cisa.gov
  • CVE.orgCVE-2012-2539

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2012-2539

    30-day exploitation probability 53.0%

    first.org
  • NIST NVDCVE-2012-2539

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listove

    nvd.nist.gov

References