Code execution vulnerabilities in Microsoft Office

Description

Use-after-free, XSS and aother unspecified vulnerabilities were found in Microsoft products. By exploiting these vulnerabilities malicious users can execute or inject arbitrary code. These vulnerabilities can be exploited remotely via a specially designed Office document.

Original advisories

• MS15-033

• CVE-2015-0204
• CVE-2015-0484
• CVE-2015-0492
• CVE-2015-0469
• CVE-2015-0478
• CVE-2015-0480
• CVE-2015-0477
• CVE-2015-0458
• CVE-2015-0459
• CVE-2015-0470
• CVE-2015-0488
• CVE-2015-0486
• CVE-2015-0491
• CVE-2015-0460

Related products

• Microsoft-Office

CVE list

• CVE-2015-0204
  warning
• CVE-2015-0484
  high
• CVE-2015-0492
  critical
• CVE-2015-0469
  critical
• CVE-2015-0478
  warning
• CVE-2015-0480
  high
• CVE-2015-0477
  warning
• CVE-2015-0458
  critical
• CVE-2015-0459
  critical
• CVE-2015-0470
  warning
• CVE-2015-0488
  critical
• CVE-2015-0486
  critical
• CVE-2015-0491
  critical
• CVE-2015-0460
  critical

KB list

• 2965224
• 2965284
• 2553428
• 2965236
• 2965215
• 2553164
• 2965238
• 2965210
• 2965289
• 3051737
• 2965306
• 3055707

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com