CVE-2015-1642: Microsoft Office Memory Corruption Vulnerability
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Other sources
Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
Apply Microsoft security updates for Microsoft Office to remediate the memory corruption vulnerability. Affected software referenced: Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1. Install any updates or patches Microsoft provides for these Office installations.
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1642?
CVE-2015-1642 is rated as critical due to its potential to allow remote code execution.
How do I fix CVE-2015-1642?
To fix CVE-2015-1642, apply the relevant security updates provided by Microsoft for Office 2007 SP3, 2010 SP2, and 2013 SP1.
What versions of Microsoft Office are affected by CVE-2015-1642?
CVE-2015-1642 affects Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1.
What kind of attack is associated with CVE-2015-1642?
CVE-2015-1642 allows remote attackers to execute arbitrary code via a crafted document.
Is CVE-2015-1642 a local or remote vulnerability?
CVE-2015-1642 is a remote vulnerability, enabling attackers to exploit it from a distance.