CVE-2015-1760 — Out-of-bounds Write in Microsoft Office

CWE-195 documents4 sources
Severity
9.3CRITICALNVD
EPSS
35.9%
top 2.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Office
Timeline
PublishedJun 10
Latest updateMay 14

Description

Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/office2010, 2013+1

🔴Vulnerability Details

1
GHSA
GHSA-qhm4-37rv-w724: Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via↗2022-05-14
▶

🕵️Threat Intelligence

3
Talos
Microsoft Patch Tuesday - June 2015↗2015-06-09
▶
Talos
Microsoft Patch Tuesday - June 2015↗2015-06-09
▶
Zscaler
Zscaler detects IE & MS Office Vulnerabilities | 06-09-2015↗
▶
CVE-2015-1760 — Out-of-bounds Write in Microsoft Office | cvebase