{"id":"CVE-2012-2524","title":"Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka \"CGM File Format Memory Corruption…","summary":"Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka \"CGM File Format Memory Corruption…","severity":"critical","cvss":9.3,"cvssVector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","cwe":["CWE-119"],"vendor":"microsoft","product":"office","affected":["office = 2007","office = 2010"],"published":"2012-08-15","updated":"2026-10-09","sourceUpdated":"2026-10-09T20:17:03.727","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2012-2524","references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA12-227A.html","label":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057","label":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702","label":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA12-227A.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"epss":0.20124,"epssPercentile":0.97408,"ingestedAt":"2026-10-09T21:12:42.309Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-09T19:06:19.561977Z"},"slug":"CVE-2012-2524","body":"## Overview\n\nMicrosoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka \"CGM File Format Memory Corruption Vulnerability.\"\n\n## Affected\n\n- `office = 2007`\n- `office = 2010`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":51.2,"likelihood":4,"exploitation":0,"ransomware":0},"changes":[]}