CVE-2015-2469

Microsoft Office - Memory Corruption

Title source: rule
STIX 2.1

Description

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/37910

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/37910/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033239

Scores

EPSS 0.6918
EPSS Percentile 98.7%

Details

CWE
CWE-119
Status published
Products (4)
microsoft/office 2010 sp2 (2 CPE variants)
microsoft/office 2011
microsoft/word 2007 sp3
microsoft/word 2010 sp2
Published Aug 15, 2015
Tracked Since Feb 18, 2026