CVE-2015-2468

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

Office, Office Compatibility Pack, Office Web Apps Server, Office Word, Office For Mac, Sharepoint Server, Word Viewer, Word Web App

Microsoft Office

= 2010, 2011, 2016

Microsoft Office Compatibility Pack

All versions

Microsoft Sharepoint Server

= 2010, 2013

Microsoft Word

= 2007, 2010, 2013

Microsoft Word Viewer

All versions

Microsoft Word Web Apps

= 2010

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

29.5% (98th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2015-08-15