(MS15-059) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3064949)

  Severity: HIGH
  CVE Identifier: CVE-2015-1770,CVE-2015-1760,CVE-2015-1759
  Advisory Date: OCT 05, 2015

  DESCRIPTION

This security update addresses vulnerabilities found in Microsoft Office that could allow remote code execution once a user opens a specially crafted Microsoft Office file. Once an attacker successfully exploited the vulnerabilities, he could execute arbitrary code thus compromising the security of the system.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Office 2010 Service Pack 2 (32-bit editions)
  • Microsoft Office 2010 Service Pack 2 (32-bit editions
  • Microsoft Office 2010 Service Pack 2 (64-bit editions)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions)
  • Microsoft Office 2013 RT Service Pack 1