CVE-2015-2379

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to…

published July 14, 2015

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

⚠️ A crafty crafted document is all it takes! This Microsoft Office memory corruption vulnerability lets attackers execute arbitrary code, like a trickster slipping a harmful note into your locked briefcase. 🔥 Think of it like receiving a beautifully wrapped gift at your office party. It looks appealing, but inside is a ticking time bomb that could wreak havoc on your computer system! If exploited, attackers could gain control over your system, executing commands at will or causing a denial of service, effectively throwing your productivity out the window. Imagine your computer freezing mid-presentation or, worse, your sensitive data being accessed without your consent—yikes!

Put simply

Think of it like receiving a beautifully wrapped gift at your office party. It looks appealing, but inside is a ticking time bomb that could wreak havoc on your computer system! This vulnerability arises from memory corruption flaws in several versions of Microsoft Word and Office, allowing an attacker to create malicious documents that, when opened, trigger execution of arbitrary code.

What to do

If exploited, attackers could gain control over your system, executing commands at will or causing a denial of service, effectively throwing your productivity out the window. Imagine your computer freezing mid-presentation or, worse, your sensitive data being accessed without your consent—yikes! To protect yourself, ensure that you're running the latest versions of Microsoft Office with all security patches applied. Avoid opening suspicious documents, and educate your team about safe practices when dealing with potentially harmful files. 🛡️ You've got this! Stay vigilant and keep your software updated to lock down your defenses. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13715 · 96.5th percentile
Published
2015-07-14T21:00Z
EPSS history
Timeline
  • 14 JUL 21:00Z
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to…
    cvelistv5