Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-2469 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Office

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
9.3CRITICALNVD
EPSS
69.2%
top 1.35%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Microsoft OfficeMicrosoft Word
Timeline
PublishedAug 15
Latest updateMay 14

Description

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/office2010, 2011+1
▶NVDmicrosoft/word2007, 2010+1

🔴Vulnerability Details

2
GHSA
GHSA-cpv6-gp82-2m5h: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted docume↗2022-05-14
▶
CVEList
CVE-2015-2469: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted docume↗2015-08-15
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Office 2007 - 'wwlib.dll' Type Confusion (MS15-081)↗2015-08-21
▶

📋Vendor Advisories

1
Apache
Apache nifi: CVE-2018-1310↗
▶
CVE-2015-2469 — Microsoft Office vulnerability | cvebase