Kaspersky ID:
KLA10645
Дата обнаружения:
11/08/2015
Обновлено:
18/06/2020

Описание

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

  1. Improper memory objects handling can be exploited remotely via a specially designed file to execute arbitrary code;
  2. An unknown vulnerability can be exploited remotely via a specially designed file to obtain sensitive information.

Technical details

To exploit (2) attacker must first leverage another vulnerability to cause code execution in IE with EPM. Than malicious can execute Excel, Notepad, PowerPoint or another with unsafe command line parameter. Another part of updates for this vulnerability listed in KLA10646, KLA10648

Первичный источник обнаружения

Эксплуатация

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/37912

https://www.exploit-db.com/exploits/37913

https://www.exploit-db.com/exploits/37910

https://www.exploit-db.com/exploits/37924

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2015-1642
    critical
  • CVE-2015-2423
    warning
  • CVE-2015-2466
    critical
  • CVE-2015-2468
    critical
  • CVE-2015-2467
    critical
  • CVE-2015-2469
    critical
  • CVE-2015-2470
    critical
  • CVE-2015-2477
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.