CVE-2012-1887

published 2012-11-14

CVE-2012-1887: Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability."

Affected

5 ranges

Vendor	Product	Version range	Fixed in
microsoft	excel	—	—
microsoft	excel	—	—
microsoft	excel	—	—
microsoft	office	—	—
microsoft	office	—	—

CWE-399