Product:
Microsoft Office
Summary
Microsoft Office 2007, 2010, and 2013 allows remote attackers to execute arbitrary code via a crafted document, known as the Microsoft Office Memory Corruption Vulnerability. This vulnerability can lead to complete compromise of the affected system. It is critical for users to be aware of this issue and take necessary precautions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2015-1642 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious document and convince the user to open it. Once the document is opened, the attacker can execute arbitrary code on the victim’s machine, potentially leading to full system compromise. User interaction is required, making social engineering tactics a common method of exploitation.
Affected Products
- Microsoft Office 2007 SP3: Vulnerable to remote code execution via crafted documents.
- Microsoft Office 2010 SP2: Susceptible to exploitation through specially crafted files.
- Microsoft Office 2013 SP1: Can be compromised by opening malicious documents.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Regularly updating software can help protect against known vulnerabilities and reduce the risk of exploitation.