CVE-2015-1683CWE-119

CVE-2015-1683

High · published May 13, 2015

CVSS v2.0
9.3
EPSS
14%
Percentile
96.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky crafted document could allow attackers to execute arbitrary code in Microsoft Office 2007 SP3. Talk about a party crasher! 🎉 Think of it like a waiter serving a gourmet meal that actually contains a hidden ingredient that can make you unwell. If you don’t read the menu closely, you might end up with a surprise that leaves you regretting your choice! An attacker could exploit this vulnerability to run malicious code on the affected system, potentially leading to unauthorized access, data theft, or even total control over the machine. The consequences range from inconvenience to absolute disaster!

Put simply

Think of it like a waiter serving a gourmet meal that actually contains a hidden ingredient that can make you unwell. If you don’t read the menu closely, you might end up with a surprise that leaves you regretting your choice! This memory corruption vulnerability occurs when Microsoft Office processes a specially crafted document, allowing an attacker to execute arbitrary code in the context of the user running the application.

What to do

An attacker could exploit this vulnerability to run malicious code on the affected system, potentially leading to unauthorized access, data theft, or even total control over the machine. The consequences range from inconvenience to absolute disaster! To protect yourself, ensure that your Microsoft Office 2007 is updated to the latest service pack and security patches. Regularly review your security settings and consider transitioning to a supported version of Office for enhanced protection. You've got this! Stay vigilant, and you’ll be protecting your digital fortress in no time! 🛡️

The record
Technical detail
CVSS v2.0
9.3 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.13508 · 96.4th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2015-05-13T14:59Z
Affected products (1)
ProductVersionsFixed in
microsoft/officeall versions—
References (4)
EPSS history
Timeline
  • 13 MAY 10:00Z
    Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
    cvelistv5