CVE-2015-1651 — Microsoft Word vulnerability

4 documents4 sources
Severity
9.3CRITICALNVD
EPSS
53.1%
top 2.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Word
Timeline
PublishedApr 14
Latest updateMay 14

Description

Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/word2007

🔴Vulnerability Details

2
GHSA
GHSA-fc4j-3679-3858: Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary c↗2022-05-14
▶
CVEList
CVE-2015-1651: Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary c↗2015-04-14
▶

💬Community

1
Bugzilla
pcre: Buffer overflow caused by certain patterns with an unmatched closing parenthesis (8.38/18)↗2015-12-02
▶
CVE-2015-1651 — Microsoft Word vulnerability | cvebase