PT-2015-4458 · Microsoft · Word Automation Services+7

Published 2015-03-10 · Updated 2018-10-12 · CVE-2015-0086

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2013 SP1 Microsoft Word versions 2007 SP3 through 2013 SP1 Microsoft Word Viewer version not specified Office Compatibility Pack version SP3 Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Web Applications version 2010 SP2 Web Apps Server version 2013 Gold and SP1

Description A remote code execution issue exists in Microsoft Office software due to improper handling of rich text format files in memory. An attacker could exploit this issue by using a specially crafted file to perform actions in the security context of the current user. Exploitation requires a user to open the specially crafted file with an affected version of Microsoft Office software.

Recommendations For Microsoft Office versions 2007 SP3 through 2013 SP1, update to a version that properly handles rich text format files in memory. For Microsoft Word versions 2007 SP3 through 2013 SP1, update to a version that properly handles rich text format files in memory. For Microsoft Word Viewer, update to a version that properly handles rich text format files in memory. For Office Compatibility Pack version SP3, update to a version that properly handles rich text format files in memory. For Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1, update to a version that properly handles rich text format files in memory. For Web Applications version 2010 SP2, update to a version that properly handles rich text format files in memory. For Web Apps Server version 2013 Gold and SP1, update to a version that properly handles rich text format files in memory. As a temporary workaround, consider avoiding the use of rich text format files until a patch is available.

Fix

RCE

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0086

Affected Products

Office

Office Word

Word Viewer

Office Compatibility Pack

Sharepoint Server

Web Applications

Web Apps Server

Word Automation Services

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-0086 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0086 · Security Note
• http://technet.microsoft.com/security/bulletin/ms15-022 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0086 · Note
• http://securitytracker.com/id/1031896 · Note