Buffer overflow in Microsoft Office
CVE-2015-2477
Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Vulnerability class: Buffer Overflow
EPSS: 0.136 (96.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office — versions 2007, 2011, 2016
- Microsoft Word_viewer
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)