CVE-2015-2468CWE-119

CVE-2015-2468

High · published August 15, 2015

CVSS v2.0
9.3
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

⚠️ A cleverly crafted document could be your biggest headache! This memory corruption vulnerability in Microsoft Word versions can allow attackers to execute arbitrary code without breaking a sweat. 🔥 It's like sneaking a dangerous ingredient into a recipe that looks perfectly fine — once someone takes a bite (or opens the document), they could be in for a nasty surprise! An attacker could exploit this vulnerability to execute arbitrary code on the victim's machine, potentially gaining control of the system or accessing sensitive information. This could lead to data breaches, loss of privacy, or even further network compromises.

Put simply

It's like sneaking a dangerous ingredient into a recipe that looks perfectly fine — once someone takes a bite (or opens the document), they could be in for a nasty surprise! This vulnerability arises from memory corruption issues in several Microsoft Word versions, enabling attackers to run malicious code when a user opens a specially crafted document.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the victim's machine, potentially gaining control of the system or accessing sensitive information. This could lead to data breaches, loss of privacy, or even further network compromises. To protect your systems, ensure that all affected Microsoft Office products are updated to the latest versions or patches. Regularly educate users about the risks of opening unknown documents and consider implementing advanced threat protection solutions. You've got this! With the right updates and vigilance, you can keep your systems secure and your users safe. 🛡️

The record
Technical detail
CVSS v2.0
9.3 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.29519 · 98.2th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2015-08-15T04:59Z
Affected products (13)
ProductVersionsFixed in
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_compatibility_packall versions—
microsoft/sharepoint_serverall versions—
microsoft/sharepoint_serverall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/word_viewerall versions—
microsoft/word_web_appsall versions—
microsoft/word_web_apps_serverall versions—
References (6)
EPSS history
Timeline
  • 17 OCT 03:06Z
    EPSS moved 43% → 30%
    epss
  • 13 OCT 03:06Z
    EPSS moved 30% → 43%
    epss
  • 15 AUG 00:00Z
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack…
    cvelistv5