Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2011-1982

Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."

  • Published: Sep 15, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-1982
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
microsoft / office 2010 2010.x
microsoft / office 2007-sp2 2007-sp2.x
microsoft / office 2010-sp1 2010-sp1.x