PT-2015-1062 · Microsoft · Office+4

Published 2015-04-14 · Updated 2025-10-22 · CVE-2015-1641

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2013 SP1 Microsoft Word versions 2007 SP3 through 2013 SP1 Microsoft Word for Mac version 2011 Office Compatibility Pack version SP3 Word Automation Services on SharePoint Server versions 2010 SP2 and 2013 SP1 Office Web Apps Server versions 2010 SP2 and 2013 SP1

Description The issue is related to errors that occur due to incorrect handling of specially crafted RTF files. Exploitation of this issue may allow a remote attacker to execute arbitrary code with the privileges of the current user. This can happen when a user opens a specially crafted file with an affected version of Microsoft Office software.

Recommendations For Microsoft Office versions 2007 SP3 through 2013 SP1, update to a newer version that contains a fix for this issue. For Microsoft Word versions 2007 SP3 through 2013 SP1, update to a newer version that contains a fix for this issue. For Microsoft Word for Mac version 2011, update to a newer version that contains a fix for this issue. For Office Compatibility Pack version SP3, update to a newer version that contains a fix for this issue. For Word Automation Services on SharePoint Server versions 2010 SP2 and 2013 SP1, update to a newer version that contains a fix for this issue. For Office Web Apps Server versions 2010 SP2 and 2013 SP1, update to a newer version that contains a fix for this issue. As a temporary workaround, consider avoiding the use of RTF files in the affected Microsoft Office software until a patch is available.

Exploit

Fix

RCE

DoS

Memory Corruption

Weakness Enumeration

CWE-787

CWE-399

Related Identifiers

BDU:2015-09917

BDU:2015-09918

BDU:2015-09919

CVE-2015-1641

Affected Products

Office

Office Word

Office Compatibility Pack

Office Web Apps Server

Sharepoint Server

References · 17

• 🔥 https://github.com/Cyberclues/rtf_exploit_extractor · Exploit
• https://bdu.fstec.ru/vul/2015-09918 · Security Note
• https://bdu.fstec.ru/vul/2015-09919 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09917 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1641 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1641 · Security Note
• https://t.me/cvenotify/87287 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1641 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-033 · Note
• http://securitytracker.com/id/1032104 · Note
• http://technet.microsoft.com/security/bulletin/ms15-033 · Note
• https://t.me/cvenotify/117900 · Telegram Post
• https://t.me/nekaspersky/1796 · Telegram Post