← Back

CVE-2015-0064

nvd nist
Published: Feb 11, 2015Modified: May 6, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Office Remote Code Execution Vulnerability."

Affected (9)

Microsoft
7 products
Web Applications
Office Compatibility Pack
Word Automation Services
Word
Word Viewer
Office
Sharepoint Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Web Applications
Version 2010 sp2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Office Compatibility Pack
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Word Automation Services
All versions
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Word
Version 2007 sp3
Word
Version 2010 sp2
Word Viewer
All versions
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Office
Version 2010 sp2
Office
Version 2010 sp2
Configuration F
1 vulnerable
Vulnerable SoftwareAffected Versions
Sharepoint Server
Version 2010

Related CWEs

CWE-399
CWE-399

References (10)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.