CVE-2015-2380: Buffer Overflow
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2380?
CVE-2015-2380 is rated as critical due to its potential to allow remote code execution.
How do I fix CVE-2015-2380?
To fix CVE-2015-2380, apply the latest security updates provided by Microsoft for affected Office and Word versions.
Who is affected by CVE-2015-2380?
CVE-2015-2380 affects users of Microsoft Word 2007 SP3, Office 2010 SP2, and Word 2013 SP1, among other specified versions.
What types of attacks can CVE-2015-2380 facilitate?
CVE-2015-2380 can facilitate remote code execution or cause a denial of service through memory corruption.
Is there a workaround for CVE-2015-2380?
While the best solution is to apply patches, disabling macro execution in Microsoft Word can serve as a temporary workaround for CVE-2015-2380.