PT-2015-4440 · Microsoft · Office Word

Published 2015-02-10 · Updated 2018-10-12 · CVE-2015-0065

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3

Description A remote code execution issue exists due to improper handling of objects in memory while parsing specially crafted Office files, potentially corrupting system memory and allowing arbitrary code execution. This could enable an attacker to run arbitrary code in the context of the current user, potentially taking complete control of the affected system if the user has administrative rights.

Recommendations For Microsoft Word 2007 SP3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0065

Affected Products

Office Word

References · 9

• 🔥 https://exploit-db.com/exploits/37966 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0065 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-0065 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012 · Vendor Advisory
• http://securityfocus.com/bid/72465 · Note
• http://secunia.com/advisories/62808 · Note
• http://technet.microsoft.com/security/bulletin/ms15-012 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0065 · Note
• http://securitytracker.com/id/1031720 · Note