CVE-2015-6172: Input Validation
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted email message processed by Outlook, aka "Microsoft Office RCE Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6172?
CVE-2015-6172 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2015-6172?
To fix CVE-2015-6172, users should apply the security updates provided by Microsoft for the affected versions of Office and Word.
Who is affected by CVE-2015-6172?
CVE-2015-6172 affects users of Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, and the Office Compatibility Pack SP3.
What type of vulnerability is CVE-2015-6172?
CVE-2015-6172 is categorized as a remote code execution vulnerability.
What can attackers do with CVE-2015-6172?
Attackers can execute arbitrary code on a victim's system by crafting a malicious email message processed by Outlook.