CVE-2012-0167: Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 all...

Security readout for executives and security teams

CVE-2012-0167 is a Microsoft Office graphics parsing flaw. A malicious Office document containing a crafted EMF image could trigger memory corruption and allow code execution. The impact is serious for organizations still running the listed Office 2003 or 2007 versions. Exposure is limited to environments with Microsoft Office 2003 SP3 or Office 2007 SP2/SP3. Risk is highest where users can receive and open untrusted Office documents. Treat this as high priority only if legacy Office versions remain in use. Fully patched or retired Office 2003/2007 deployments materially reduce the business risk. Mitigation focus: Apply Microsoft guidance and updates from MS12-034.; Prioritize removal or isolation of systems that cannot be patched.; Restrict handling of untrusted Office documents on affected systems..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.