CVE-2015-0064

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Office Remote Code Execution Vulnerability."

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/72463
http://secunia.com/advisories/62808
http://www.securitytracker.com/id/1031720
https://www.exploit-db.com/exploits/37967/
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:web_applications:2010:sp2:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR	cpe:2.3:a:microsoft:word:2010:sp2::::::
	cpe:2.3:a:microsoft:word:2007:sp3::::::
	cpe:2.3:a:microsoft:word_viewer::::::::

Configuration 5 (hide)

OR	cpe:2.3:a:microsoft:office:2010:sp2:x86:::::*
	cpe:2.3:a:microsoft:office:2010:sp2:x64:::::*

Configuration 6 (hide)

cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*

Information

Published : 2015-02-10 19:01

Updated : 2018-10-12 15:08

NVD link : CVE-2015-0064

Mitre link : CVE-2015-0064

JSON object : View

CWE

CWE-399

Resource Management Errors

Advertisement

Products Affected

microsoft

web_applications
word_automation_services
office_compatibility_pack
sharepoint_server
word_viewer
office
word

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/72463", "name": "72463", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/62808", "name": "62808", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.securitytracker.com/id/1031720", "name": "1031720", "tags": [], "refsource": "SECTRACK"}, {"url": "https://www.exploit-db.com/exploits/37967/", "name": "37967", "tags": [], "refsource": "EXPLOIT-DB"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012", "name": "MS15-012", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Office Remote Code Execution Vulnerability.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-399"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-0064", "ASSIGNER": "secure@microsoft.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2015-02-11T03:01Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:web_applications:2010:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-12T22:08Z"}