What is CVE-2015-2466?

CVE-2015-2466 is a vulnerability in Microsoft Office, classified under Improper Input Validation. Published 2015-08-15.

Is CVE-2015-2466 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Microsoft Office

CVE-2015-2466

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability."

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.172 (96.8th percentile) — read the EPSS interpretation.

Affected products

Microsoft Office — versions 2007, 2010, 2013
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

secure@microsoft.com (x_refsource_MS, vendor-advisory)
secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2015-2466?: CVE-2015-2466 is a vulnerability in Microsoft Office, classified under Improper Input Validation. Published 2015-08-15.
Is CVE-2015-2466 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.