(MS15-070) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)

  Severity: HIGH
  CVE Identifier: CVE-2015-2376,CVE-2015-2377,CVE-2015-2379,CVE-2015-2380,CVE-2015-2415,CVE-2015-2424,CVE-2015-2375,CVE-2015-2378
  Advisory Date: AUG 16, 2015

  DESCRIPTION

This security update resolves several vulnerabilities in Microsoft Office, most severe of which could cause remote code execution. Users with administrator rights currently logged in on the vulnerable system are more susceptible to the risks of these vulnerabilities.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Excel 2007 Service Pack 3
  • Microsoft PowerPoint 2007 Service Pack 3
  • Microsoft Word 2007 Service Pack 3
  • Microsoft Office 2010 Service Pack 2 (32-bit editions)
  • Microsoft Office 2010 Service Pack 2 (64-bit editions)
  • Microsoft Excel 2010 Service Pack 2 (32-bit editions)
  • Microsoft Excel 2010 Service Pack 2 (64-bit editions)
  • Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions)
  • Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
  • Microsoft Word 2010 Service Pack 2 (32-bit editions)
  • Microsoft Word 2010 Service Pack 2 (64-bit editions)
  • Microsoft Excel 2013 Service Pack 1 (32-bit editions)
  • Microsoft Excel 2013 Service Pack 1 (64-bit editions)