CVE-2015-2545

Published: Sep 9, 2015Modified: Apr 22, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability."

Affected (5)

Products: Microsoft: Office

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2007 sp3
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2013 sp1
Microsoft Office	Version 2013 sp1
Microsoft Office	Version 2016

References (7)

http://blog.morphisec.com/exploit-bypass-emet-cve-2015-2545

Source: secure@microsoft.com

ExploitThird Party Advisory

http://www.securitytracker.com/id/1033488

Source: secure@microsoft.com

Broken LinkThird Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099

Source: secure@microsoft.com

PatchVendor Advisory

http://blog.morphisec.com/exploit-bypass-emet-cve-2015-2545

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

http://www.securitytracker.com/id/1033488

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2545

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.