Microsoft Office CVE-2015-1760 Memory Corruption Vulnerability
BID:75015
Info
Microsoft Office CVE-2015-1760 Memory Corruption Vulnerability
| Bugtraq ID: | 75015 |
| Class: | Unknown |
| CVE: |
CVE-2015-1760 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2015 12:00AM |
| Updated: | Jun 09 2015 12:00AM |
| Credit: | Ben Hawkes of Google Project Zero |
| Vulnerable: |
Microsoft Office 2007 SP3 |
| Not Vulnerable: | |
Discussion
Microsoft Office CVE-2015-1760 Memory Corruption Vulnerability
Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory.
An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.
Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory.
An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.
Exploit / POC
Microsoft Office CVE-2015-1760 Memory Corruption Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Office CVE-2015-1760 Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Microsoft Office 2010 (64-bit edition) SP2
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2010 (32-bit edition) SP2
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Microsoft Office 2010 (64-bit edition) SP2
-
Microsoft Security Update for Microsoft Office 2010 (KB2863817) 64-Bit Edition
https://www.microsoft.com/downloads/details.aspx?FamilyId=ab5630fd-6b3 8-4266-a9af-914712a038c9
Microsoft Office 2013 Service Pack 1 (32-bit editions)
-
Microsoft Security Update for Microsoft Office 2013 (KB3039749) 32-Bit Edition
https://www.microsoft.com/downloads/details.aspx?FamilyId=da47b0a7-289 8-4a40-85b0-c009d0bea2be -
Microsoft Security Update for Microsoft Office 2013 (KB3039782) 32-Bit Edition
https://www.microsoft.com/downloads/details.aspx?FamilyId=998e343b-52a 5-41ba-b9db-c7890b074969
Microsoft Office 2010 (32-bit edition) SP2
-
Microsoft Security Update for Microsoft Office 2010 (KB2863817) 32-Bit Edition
https://www.microsoft.com/downloads/details.aspx?FamilyId=fed533d1-d42 7-4d52-8a29-27d7a564f661
Microsoft Office 2013 Service Pack 1 (64-bit editions)
-
Microsoft Security Update for Microsoft Office 2013 (KB3039749) 64-Bit Edition
https://www.microsoft.com/downloads/details.aspx?FamilyId=f71455ac-7fc 9-4ff9-8787-e5a3a514592f -
Microsoft Security Update for Microsoft Office 2013 (KB3039782) 64-Bit Edition
https://www.microsoft.com/downloads/details.aspx?FamilyId=b62b6a1e-3ed 0-42a4-82e6-59249e1cce82