Product:
Microsoft Office
Summary
Microsoft PowerPoint 2007, Word 2007, PowerPoint 2010, Word 2010, PowerPoint 2013, Word 2013, and PowerPoint 2013 RT allow remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document. This vulnerability is known as Microsoft Office Memory Corruption Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2015-2424 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious Office document and convince a user to open it. Once the document is opened, the attacker can execute arbitrary code or cause memory corruption, leading to a denial of service. User interaction is required for the exploit to be successful.
Affected Products
- Microsoft PowerPoint 2007 SP3
- Microsoft Word 2007 SP3
- Microsoft PowerPoint 2010 SP2
- Microsoft Word 2010 SP2
- Microsoft PowerPoint 2013 SP1
- Microsoft Word 2013 SP1
- Microsoft PowerPoint 2013 RT SP1
Mitigation
Apply updates as per vendor instructions to mitigate the risk associated with this vulnerability. Keeping software up to date is crucial in protecting against potential exploits.