CVE-2015-1682

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013…

published May 13, 2015

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

⚠️ This Microsoft Office vulnerability could allow attackers to slip in and execute rogue code simply by opening a crafty document! Think of this flaw like a restaurant offering a 'secret menu' item. If the chef decides to serve up something unverified, any customer could end up with an unexpected and potentially harmful dish. In this case, a malicious document can be just as sneaky! What could be disastrous here is that an attacker could potentially gain control of your system, accessing files and data without you even knowing. It's like giving someone the keys to your office while you’re busy in a meeting!

Put simply

Think of this flaw like a restaurant offering a 'secret menu' item. If the chef decides to serve up something unverified, any customer could end up with an unexpected and potentially harmful dish. In this case, a malicious document can be just as sneaky! This vulnerability arises from a memory corruption issue in various Microsoft Office applications, which allows remote attackers to execute arbitrary code by crafting a specific document. The flaw lies in how Office handles certain input, leading to unintended code execution.

What to do

What could be disastrous here is that an attacker could potentially gain control of your system, accessing files and data without you even knowing. It's like giving someone the keys to your office while you’re busy in a meeting! To protect yourself, ensure all your Microsoft Office applications are updated to the latest versions with the appropriate security patches applied. If you're not sure, take a moment to check your software updates right now! You've got this! Stay proactive and keep your software updated to seal the gaps. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20398 · 97.5th percentile
Published
2015-05-13T10:00Z
EPSS history
Timeline
  • 13 MAY 10:00Z
    Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013…
    cvelistv5