GCVE - cpe:2.3:a:microsoft:word:2007:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:word:2007:sp2:*:*:*:*:*:*

part: a version: 2007 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Word (`fed6abb9-31ef-57e0-8892-46b0e83ba7d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-2539`	vulnerable	2026-06-08 05:02:04.790573	Details available Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability." Published: 2012-12-12T00:00:00.000Z Updated: 2025-10-22T00:05:45.640Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA12-346A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-079 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16073	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2528`	vulnerable	2026-06-08 05:02:04.765490	Details available Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka "RTF File listid Use-After-Free Vulnerability." Published: 2012-10-09T21:00:00.000Z Updated: 2024-08-06T19:34:25.911Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15680 http://www.securityfocus.com/bid/55781 http://www.us-cert.gov/cas/techalerts/TA12-283A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0183`	vulnerable	2026-06-08 05:00:39.791052	Details available Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability." Published: 2012-05-09T00:00:00.000Z Updated: 2024-08-06T18:16:19.287Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-029 http://www.securityfocus.com/bid/53344 http://www.securitytracker.com/id?1027035 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15327 http://www.us-cert.gov/cas/techalerts/TA12-129A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0182`	vulnerable	2026-06-08 05:00:39.787411	Details available Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability." Published: 2012-10-09T21:00:00.000Z Updated: 2024-08-06T18:16:20.088Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/55780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15426 http://www.us-cert.gov/cas/techalerts/TA12-283A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3214`	vulnerable	2026-06-08 04:55:13.739114	Details available Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Stack Overflow Vulnerability." Published: 2010-10-13T18:00:00.000Z Updated: 2024-08-07T03:03:18.635Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/514302/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079 http://www.us-cert.gov/cas/techalerts/TA10-285A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7322	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1902`	vulnerable	2026-06-08 04:54:10.925634	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1901`	vulnerable	2026-06-08 04:54:10.925123	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1900`	vulnerable	2026-06-08 04:54:10.922467	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.