Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 9.3 · microsoftNVD modified 2026-10-09 20:17
Affected (CPE criteria) 3
cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*
References 6
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702