Microsoft Office CVE-2015-1770 Uninitialized Memory Use Remote Code Execution Vulnerability
BID:75016
Info
Microsoft Office CVE-2015-1770 Uninitialized Memory Use Remote Code Execution Vulnerability
| Bugtraq ID: | 75016 |
| Class: | Unknown |
| CVE: |
CVE-2015-1770 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2015 12:00AM |
| Updated: | Jun 09 2015 12:00AM |
| Credit: | Yong Chuan Koh (@yongchuank) MWR Labs (@mwrlabs) |
| Vulnerable: |
Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 RT Service Pack 1 0 |
| Not Vulnerable: | |
Discussion
Microsoft Office CVE-2015-1770 Uninitialized Memory Use Remote Code Execution Vulnerability
Microsoft Office is prone to a remote code execution vulnerability because it fails to properly handle objects in memory.
An attacker can leverage this issue to execute arbitrary code in the context of the currently logged in user. Failed exploit attempts will likely result in denial-of-service conditions.
Microsoft Office is prone to a remote code execution vulnerability because it fails to properly handle objects in memory.
An attacker can leverage this issue to execute arbitrary code in the context of the currently logged in user. Failed exploit attempts will likely result in denial-of-service conditions.
Exploit / POC
Microsoft Office CVE-2015-1770 Uninitialized Memory Use Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are mistaken or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are mistaken or if you are aware of more recent information, please mail us at: [email protected].