VULNERABILITY INTELLIGENCE

CVE-2011-1982

CVSS score9.3 HIGH
EPSS probability27.70%
CISA KEVNot currently listed
Published2011-09-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references