Microsoft Office Remote Code Execution Vulnerabilities
Last Update Date:
15 Apr 2015 14:58
Release Date:
15 Apr 2015
3174
Views
RISK: High Risk
TYPE: Clients - Productivity Products
- Microsoft Office Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle rich text format files in memory. - Multiple Microsoft Office Component Use After Free Vulnerabilities
Remote code execution vulnerabilities exist in Microsoft Office software that are caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. This could corrupt system memory in such a way as to allow an attacker to execute arbitrary code. - Microsoft Outlook App for Mac XSS Vulnerability
An elevation of privilege vulnerability exists in the Microsoft Outlook for Mac app that is caused when the software improperly sanitizes HTML strings.
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft Office 2007
- Microsoft Office 2010
- Microsoft Office 2013
- Microsoft Office 2013 RT
- Microsoft Office for Mac
- Microsoft SharePoint Server 2010
- Microsoft SharePoint Server 2013
- Microsoft Office Web Apps 2010
- Microsoft Office Web Apps 2013
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS15-033
Vulnerability Identifier
Source
Related Link
Share with