(MS15-070) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
Severity: HIGH
CVE Identifier: CVE-2015-2376,CVE-2015-2377,CVE-2015-2379,CVE-2015-2380,CVE-2015-2415,CVE-2015-2424,CVE-2015-2375,CVE-2015-2378
Advisory Date: AUG 16, 2015
DESCRIPTION
This security update resolves several vulnerabilities in Microsoft Office, most severe of which could cause remote code execution. Users with administrator rights currently logged in on the vulnerable system are more susceptible to the risks of these vulnerabilities.
SOLUTION
AFFECTED SOFTWARE AND VERSION
- Microsoft Excel 2007 Service Pack 3
- Microsoft PowerPoint 2007 Service Pack 3
- Microsoft Word 2007 Service Pack 3
- Microsoft Office 2010 Service Pack 2 (32-bit editions)
- Microsoft Office 2010 Service Pack 2 (64-bit editions)
- Microsoft Excel 2010 Service Pack 2 (32-bit editions)
- Microsoft Excel 2010 Service Pack 2 (64-bit editions)
- Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions)
- Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
- Microsoft Word 2010 Service Pack 2 (32-bit editions)
- Microsoft Word 2010 Service Pack 2 (64-bit editions)
- Microsoft Excel 2013 Service Pack 1 (32-bit editions)
- Microsoft Excel 2013 Service Pack 1 (64-bit editions)