CVE-2015-1642 | BDVDB-2026-70974 Detail
MicrosoftOffice
Description#
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1203
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081
- http://www.securitytracker.com/id/1033239
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1642
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.