PT-2015-4440 · Microsoft · Office Word

Publicado 2015-02-10 · Atualizado 2018-10-12 · CVE-2015-0065

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3

Description A remote code execution issue exists due to improper handling of objects in memory while parsing specially crafted Office files, potentially corrupting system memory and allowing arbitrary code execution. This could enable an attacker to run arbitrary code in the context of the current user, potentially taking complete control of the affected system if the user has administrative rights.

Recommendations For Microsoft Word 2007 SP3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0065

Produtos afetados

Office Word

Referências · 9

• 🔥 https://exploit-db.com/exploits/37966 · Exploit
• http://securityfocus.com/bid/72465 · Nota
• http://secunia.com/advisories/62808 · Nota
• http://technet.microsoft.com/security/bulletin/ms15-012 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0065 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-0065 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0065 · Nota
• http://securitytracker.com/id/1031720 · Nota