Microsoft Office Memory Corruption Vulnerability (CVE-2015-1683) (MS15-046)
Microsoft Office Memory Corruption Vulnerability (CVE-2015-1683) (MS15-046)
Release date:
Updated on:
Affected Systems:
Microsoft Office 2013 RT
Microsoft Office 2013
Microsoft Office 2010
Microsoft Office 2007
Description:
Bugtraq id: 74484
CVE (CAN) ID: CVE-2015-1683
Microsoft Office is a Windows-based Office software package developed by Microsoft.
Microsoft Office software has the remote code execution vulnerability when the Office software cannot correctly process objects in the memory. Attackers who successfully exploit these vulnerabilities can run arbitrary code in the context of the current user.
<* Source: Jack Tang
Link: http://technet.microsoft.com/security/bulletin/MS15-046
*>
Suggestion:
Vendor patch:
Microsoft
---------
Microsoft has released a Security Bulletin (MS15-046) and patches for this:
MS15-046: Vulnerabilities in Microsoft Office cocould Allow Remote Code Execution-Important (3057181)
Link: http://technet.microsoft.com/security/bulletin/MS15-046
This article permanently updates the link address: