Intrusion PreventionMS.Word.Listid.Code.Execution
Description
This indicates an attack attempt to exploit a remote Code Execution vulnerability in Microsoft Word.
The vulnerability is caused by an error that occurs when the vulnerable application handles a malicious "rtf" file. A remote attack may be able to exploit this to execute arbitrary code on the affected system.
Affected Products
Microsoft Office 2003 Service Pack 3
Microsoft Office 2007 Service Pack 2
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 Service Pack 1 (32-bit editions)
Service Pack 1 (64-bit editions)
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://www.microsoft.com/technet/security/Bulletin/MS12-064.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-01-10 | 14.521 | Sig Added |
| 2019-01-04 | 13.518 | Sig Added |
| 2018-10-26 | 13.480 | Sig Added |
| ID | 33474 |
| Created | Oct 11, 2012 |
| Updated | Feb 13, 2023 |
| Risk |
|
| CVE ID | CVE-2012-2528 |
| Exploit Prediction Score | 90.85% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |