critical9.3Public exploit code
CVE-2015-0064
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Office 2007 - Malformed Document Stack Buffer Overflow2015-08-25 · dos · windows · Verified
Impact
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Office Remote Code Execution Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Web Applications | Version 2010 |
| Microsoft | Office Compatibility Pack | All versions |
| Microsoft | Word Automation Services | All versions |
| Microsoft | Word | Versions 2007, 2010 |
| Microsoft | Word Viewer | All versions |
| Microsoft | Office | Version 2010 |
| Microsoft | Sharepoint Server | Version 2010 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/62808
- http://www.securityfocus.com/bid/72463
- http://www.securitytracker.com/id/1031720
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
- https://www.exploit-db.com/exploits/37967/
- http://secunia.com/advisories/62808
- http://www.securityfocus.com/bid/72463
- http://www.securitytracker.com/id/1031720
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
- https://www.exploit-db.com/exploits/37967/