CVE-2011-1982
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object...
CVE-2011-1982 is a high vulnerability (CVSS 9.3) in Microsoft Office, published September 15, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.7%, the 98th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 27.7%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
CVE-2011-1982- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
CVE-2011-1982- Updated
- 2026-11-02
EUVDEUVD-2011-1976No score
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
EUVD-2011-1976- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r6xm-v62q-jv5wNo score
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object...
Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."
- Record
GHSA-r6xm-v62q-jv5w- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-073
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12243
kb.cert.org/vuls/id/909022
us-cert.gov/cas/techalerts/TA11-256A.html
nvd.nist.gov/vuln/detail/CVE-2011-1982
github.com/advisories/GHSA-r6xm-v62q-jv5w