CVE-2015-0064: microsoft office Resource Management Errors
Vulnerability summary
CVE-2015-0064 is a high (CVSS 9.3) Resource Management Errors vulnerability in microsoft office. EPSS estimates a 29.95% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-02-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Office Remote Code Execution Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
29.95%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 29.95% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Office 2007 - Malformed Document Stack Buffer Overflow
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Microsoft5 products
- office2010:sp2
- sharepoint_server2010
- web_applications2010:sp2
- word2007:sp3 | 2010:sp2
- word_automation_servicesna
1 vendor · 5 products
References
5 links
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012Vendor AdvisoryX Refsource MS