CVE-2015-2469
HighSummary
The vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted document.
Risk Assessment
Attackers can exploit this vulnerability to take control of the victim's system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update the software to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office for Mac 2011
See all- CVE-2016-7291High
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
- CVE-2016-7268High
Microsoft Word and other Office applications have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document.
Original NVD description (English source)
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."