CVE-2015-0064

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office…

published February 11, 2015

CVSS
—
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

⚠️ A cleverly crafted Office document can lead to remote code execution! This vulnerability lurks in Microsoft Word and its companions, waiting for an unsuspecting click. 🤯 Think of it like a seemingly innocuous package delivered to your doorstep; once opened, it unleashes chaos inside your home. Just like that package can contain something harmful, this document can execute malicious code without a second thought! An attacker could exploit this vulnerability to run arbitrary code on the affected system, potentially leading to unauthorized access, data theft, or even disrupting services. Imagine the potential havoc in a corporate environment where sensitive documents are the order of the day!

Put simply

Think of it like a seemingly innocuous package delivered to your doorstep; once opened, it unleashes chaos inside your home. Just like that package can contain something harmful, this document can execute malicious code without a second thought! This vulnerability arises from memory corruption in various Office applications and services, allowing attackers to execute their own code when a specially crafted document is opened by an unsuspecting user.

What to do

An attacker could exploit this vulnerability to run arbitrary code on the affected system, potentially leading to unauthorized access, data theft, or even disrupting services. Imagine the potential havoc in a corporate environment where sensitive documents are the order of the day! Ensure that all affected versions of Microsoft Word and related services are updated to the latest patches. Encourage users to be cautious about opening documents from untrusted sources, and consider implementing security solutions that can scan attachments for potential threats. You've got this! Stay vigilant, keep your software updated, and let’s keep our digital workspace secure together! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.29954 · 98.2th percentile
Published
2015-02-11T02:00Z
EPSS history
Timeline
  • 11 FEB 02:00Z
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office…
    cvelistv5