CVE-2015-6091

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execute…

published November 11, 2015

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

⚠️ A crafted Office document can lead to unexpected chaos in your system! This memory corruption vulnerability in Microsoft Word lets remote attackers execute arbitrary code without breaking a sweat. 🔥 Imagine a restaurant where the chef prepares meals without checking the ingredients list—anyone can slip in a harmful item and ruin the feast. That's how this vulnerability works: it allows malicious content to be executed as if it's a trusted recipe. If exploited, an attacker could gain unauthorized control over your system, potentially leading to data theft, malware installation, or even complete system compromise. This could be absolutely devastating for your files and security!

Put simply

Imagine a restaurant where the chef prepares meals without checking the ingredients list—anyone can slip in a harmful item and ruin the feast. That's how this vulnerability works: it allows malicious content to be executed as if it's a trusted recipe. This vulnerability arises from improper memory handling in several versions of Microsoft Word, allowing attackers to craft malicious documents that can execute arbitrary code when opened by unsuspecting users.

What to do

If exploited, an attacker could gain unauthorized control over your system, potentially leading to data theft, malware installation, or even complete system compromise. This could be absolutely devastating for your files and security! To protect yourself, ensure you are running the latest version of Microsoft Office and apply any available security patches. Educate users to be cautious with documents from unknown sources and consider using antivirus software that scans Office files for threats. You've got this! By staying updated and alert, you can keep your system safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14534 · 96.6th percentile
Published
2015-11-11T11:00Z
EPSS history
Timeline
  • 11 NOV 11:00Z
    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execute…
    cvelistv5