PT-2015-4438 · Microsoft · Office Compatibility Pack+3

Published 2015-02-10 · Updated 2023-10-03 · CVE-2015-0063

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2013 Gold, SP1, and RT Excel Viewer Office Compatibility Pack SP3 Office 2010 SP2

Description A remote code execution issue exists due to improper handling of objects in memory while parsing specially crafted Office files, potentially corrupting system memory and allowing arbitrary code execution. An attacker who successfully exploits this could run arbitrary code in the context of the current user, potentially taking complete control of the affected system if the user has administrative rights.

Recommendations For Microsoft Excel 2007 SP3, update to a version that is not affected by this issue. For Excel 2010 SP2, consider disabling the handling of specially crafted Office files until a patch is available. For Excel 2013 Gold, SP1, and RT, restrict access to specially crafted Office files to minimize the risk of exploitation. For Excel Viewer and Office Compatibility Pack SP3, avoid opening specially crafted Office files with these applications until the issue is resolved. For Office 2010 SP2, as a temporary workaround, consider restricting the use of Excel to minimize the risk of exploitation.

Fix

RCE

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0063

Affected Products

Excel Viewer

Office Excel

Office

Office Compatibility Pack

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0063 · Security Note
• http://secunia.com/advisories/62808 · Vendor Advisory
• http://securityfocus.com/bid/72460 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0063 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100439 · Note
• http://technet.microsoft.com/security/bulletin/ms15-012 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0063 · Note
• http://securitytracker.com/id/1031720 · Note