PT-2015-4458 · Microsoft · Word Automation Services+7

Publicado 2015-03-10 · Atualizado 2018-10-12 · CVE-2015-0086

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2013 SP1 Microsoft Word versions 2007 SP3 through 2013 SP1 Microsoft Word Viewer version not specified Office Compatibility Pack version SP3 Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Web Applications version 2010 SP2 Web Apps Server version 2013 Gold and SP1

Description A remote code execution issue exists in Microsoft Office software due to improper handling of rich text format files in memory. An attacker could exploit this issue by using a specially crafted file to perform actions in the security context of the current user. Exploitation requires a user to open the specially crafted file with an affected version of Microsoft Office software.

Recommendations For Microsoft Office versions 2007 SP3 through 2013 SP1, update to a version that properly handles rich text format files in memory. For Microsoft Word versions 2007 SP3 through 2013 SP1, update to a version that properly handles rich text format files in memory. For Microsoft Word Viewer, update to a version that properly handles rich text format files in memory. For Office Compatibility Pack version SP3, update to a version that properly handles rich text format files in memory. For Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1, update to a version that properly handles rich text format files in memory. For Web Applications version 2010 SP2, update to a version that properly handles rich text format files in memory. For Web Apps Server version 2013 Gold and SP1, update to a version that properly handles rich text format files in memory. As a temporary workaround, consider avoiding the use of rich text format files until a patch is available.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0086

Produtos afetados

Office

Office Word

Word Viewer

Office Compatibility Pack

Sharepoint Server

Web Applications

Web Apps Server

Word Automation Services

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-0086 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/ms15-022 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0086 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0086 · Nota de Segurança
• http://securitytracker.com/id/1031896 · Nota