Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka Microsoft Word Local Zone Remote Code Execution Vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Excel | Microsoft | 2007-sp3 (including) | 2007-sp3 (including) |
| Excel | Microsoft | 2010-sp2 (including) | 2010-sp2 (including) |
| Powerpoint | Microsoft | 2007-sp3 (including) | 2007-sp3 (including) |
| Powerpoint | Microsoft | 2010-sp2 (including) | 2010-sp2 (including) |
| Word | Microsoft | 2007-sp3 (including) | 2007-sp3 (including) |
| Word | Microsoft | 2010-sp2 (including) | 2010-sp2 (including) |
References
- http://www.securitytracker.com/id/1031896
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022
- https://www.exploit-db.com/exploits/37657/
- http://www.securitytracker.com/id/1031896
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022
- https://www.exploit-db.com/exploits/37657/