CVE-2015-2424

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:-:*:*:*
cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:*

History

07 Apr 2025, 20:28

Type Values Removed Values Added
CVSS v2 : 9.3
v3 : 8.8
v2 : 9.3
v3 : unknown

17 Jan 2025, 21:42

Type Values Removed Values Added
References (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070 - Patch, Vendor Advisory () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070 - Patch, Vendor Advisory
References (SECTRACK) http://www.securitytracker.com/id/1032899 - Broken Link, Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1032899 - Broken Link, Third Party Advisory, VDB Entry

16 Jul 2024, 17:42

Type Values Removed Values Added
CVSS v2 : 9.3
v3 : unknown
v2 : 9.3
v3 : 8.8
First Time Microsoft excel Viewer
Microsoft office
Microsoft office Compatibility Pack
Microsoft word Viewer
References (SECTRACK) http://www.securitytracker.com/id/1032899 - (SECTRACK) http://www.securitytracker.com/id/1032899 - Broken Link, Third Party Advisory, VDB Entry
References (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070 - (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070 - Patch, Vendor Advisory
CWE CWE-119 CWE-787
CPE cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:x64:*
cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:x86:*:*
cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:-:*:*:*

Information

Published : 2015-07-14 21:59

Updated : 2025-04-07 20:28


NVD link : CVE-2015-2424

Mitre link : CVE-2015-2424


JSON object : View

Products Affected

microsoft

  • word
  • word_viewer
  • powerpoint
  • office_compatibility_pack
  • excel_viewer
  • office
CWE
CWE-787

Out-of-bounds Write