PT-2015-4439 · Microsoft · Word Viewer+5

Published 2015-02-10 · Updated 2018-10-12 · CVE-2015-0064

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 through 2010 SP2 Office versions 2010 SP2 Word Automation Services in SharePoint Server 2010 Web Applications 2010 SP2 Word Viewer Office Compatibility Pack version SP3

Description A remote code execution issue exists due to improper handling of objects in memory while parsing specially crafted Office files, potentially corrupting system memory and allowing arbitrary code execution. An attacker who successfully exploits this could run arbitrary code in the context of the current user, potentially taking complete control of the affected system if the user has administrative rights.

Recommendations For Microsoft Word 2007 SP3, update to a newer version to mitigate the risk. For Office 2010 SP2, consider applying security patches or updates to resolve the issue. For Word Automation Services in SharePoint Server 2010, restrict access to specially crafted Office files until a patch is available. For Web Applications 2010 SP2, avoid opening untrusted Office documents with affected versions of Microsoft Word. For Word Viewer and Office Compatibility Pack SP3, update to a newer version or apply relevant security updates to fix the vulnerability.

Exploit

Fix

RCE

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0064

Affected Products

Office Word

Office

Office Compatibility Pack

Sharepoint Server

Web Applications

Word Viewer

References · 9

• 🔥 https://exploit-db.com/exploits/37967 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0064 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-0064 · Security Note
• http://secunia.com/advisories/62808 · Note
• http://technet.microsoft.com/security/bulletin/ms15-012 · Note
• http://securityfocus.com/bid/72463 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0064 · Note
• http://securitytracker.com/id/1031720 · Note