Vulnerability in Microsoft Word

CVE-2015-0065

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."

EPSS: 0.686 (98.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • 62808 (x_refsource_SECUNIA, third-party-advisory)
  • MS15-012 (x_refsource_MS, vendor-advisory)
  • 37966 (exploit, x_refsource_EXPLOIT-DB)
  • 72465 (vdb-entry, x_refsource_BID)
  • 1031720 (vdb-entry, x_refsource_SECTRACK)