First published: Wed Mar 11 2015(Updated: )
Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Excel for Mac | =2007-sp3 | |
Microsoft Excel for Mac | =2010-sp2 | |
Microsoft Excel | =2010-sp2 | |
Microsoft PowerPoint | =2007-sp3 | |
Microsoft PowerPoint | =2010-sp2 | |
Microsoft Word for Android | =2007-sp3 | |
Microsoft Word for Android | =2010-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0097 is rated as critical due to the potential for remote code execution.
To fix CVE-2015-0097, apply the latest security updates provided by Microsoft for affected Office applications.
CVE-2015-0097 affects Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2.
Yes, CVE-2015-0097 can be exploited remotely through a crafted Office document.
CVE-2015-0097 is associated with a local zone remote code execution vulnerability.