Product:
Microsoft Office
Summary
Microsoft Office 2007, 2010, 2013 allows remote attackers to execute arbitrary code via a crafted EPS image, known as Microsoft Office Malformed EPS File Vulnerability. This vulnerability can lead to complete compromise of the affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2015-2545 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious EPS image and convince a user to open it in an affected version of Microsoft Office. Once the EPS image is opened, the attacker can execute arbitrary code on the victim’s machine, potentially leading to full system compromise.
Affected Products
- Microsoft Office 2007 SP3: Vulnerable to remote code execution via crafted EPS images.
- Microsoft Office 2010 SP2: Susceptible to exploitation through malicious EPS files.
- Microsoft Office 2013 SP1: Can be compromised by opening specially crafted EPS images.
- Microsoft Office 2013 RT SP1: Affected by the same vulnerability allowing remote code execution.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Keeping software up to date is crucial in protecting against known vulnerabilities.