CVE-2011-1982
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object...
CVE-2011-1982 is a high vulnerability (CVSS 9.3) in Microsoft Office, published September 15, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.7%, the 98th percentile. No source names a fixed version.
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
CVE-2011-1982- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
CVE-2011-1982- Updated
- 2026-11-02
EUVDEUVD-2011-1976 No score
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
EUVD-2011-1976- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r6xm-v62q-jv5w No score
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object...
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
GHSA-r6xm-v62q-jv5w- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12243
kb.cert.org/vuls/id/909022
us-cert.gov/cas/techalerts/TA11-256A.html
nvd.nist.gov/vuln/detail/CVE-2011-1982
github.com/advisories/GHSA-r6xm-v62q-jv5w