9.3 - MS15-059

Executive Summary

Summary
Title	Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3064949)

Informations
Name	MS15-059	First vendor Publication	2015-06-09
Vendor	Microsoft	Last vendor Modification	2015-06-09
Severity (Vendor)	Important	Revision	1.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Severity Rating: Important
Revision Note: V1.0 (June 9, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Original Source

Url : https://technet.microsoft.com/en-us/library/security/MS15-059

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-19	Data Handling

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:28513

Oval ID:	oval:org.mitre.oval:def:28513
Title:	Microsoft Office memory corruption vulnerability – CVE-2015-1760 (MS15-059)
Description:	Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-1760	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 7 Microsoft Windows Vista Microsoft Windows 8 Microsoft Windows 8.1	Product(s):	Microsoft Office Compatibility Pack Microsoft Office 2010 Microsoft Office 2013
Definition Synopsis:
For Office Compatibility pack 2007 and its vulnerable file Microsoft Office Compatibility Pack is installed AND Check if the version of Wpft532.cnv is greater than or equal to 2006.1200.0000.0000 AND Check if the version of Wpft532.cnv is less than 2006.1200.6722.5000 OR For Office 2010 and its vulnerable file Microsoft Office 2010 is installed AND Check if the version of Wpft532.cnv is greater than or equal 2010.1400.0000.0000 AND Check if the version of Wpft532.cnv is less than 2010.1400.4730.1010 OR For Office 2013 and its vulnerable file Microsoft Office 2013 is installed AND vulnerable file Check if the version of Wpft532.cnv is greater than or equal to 2012.1500.0000.0000 and less than 2012.1500.4727.1000 AND Check if the version of osf.dll is less than 15.0.4725.1000

Definition Id: oval:org.mitre.oval:def:28531

Oval ID:	oval:org.mitre.oval:def:28531
Title:	Microsoft Office uninitialized memory use vulnerability – CVE-2015-1770 (MS15-059)
Description:	Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-1770	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 7 Microsoft Windows Vista Microsoft Windows 8 Microsoft Windows 8.1	Product(s):	Microsoft Office 2013
Definition Synopsis:
Microsoft Office 2013 is installed AND vulnerable file Check if the version of Wpft532.cnv is greater than or equal to 2012.1500.0000.0000 and less than 2012.1500.4727.1000 AND Check if the version of osf.dll is less than 15.0.4725.1000

Definition Id: oval:org.mitre.oval:def:28744

Oval ID:	oval:org.mitre.oval:def:28744
Title:	Microsoft Office memory corruption vulnerability – CVE-2015-1759 (MS15-059)
Description:	Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-1759	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 7 Microsoft Windows Vista Microsoft Windows 8 Microsoft Windows 8.1	Product(s):	Microsoft Office Compatibility Pack
Definition Synopsis:
Microsoft Office Compatibility Pack is installed AND Check if the version of Wpft532.cnv is greater than or equal to 2006.1200.0000.0000 AND Check if the version of Wpft532.cnv is less than 2006.1200.6722.5000

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Office cpe:2.3:a:microsoft:office:2013:sp1:::rt:::* cpe:2.3:a:microsoft:office:2013:sp1:::-:::* cpe:2.3:a:microsoft:office:2013:sp1:::::: cpe:2.3:a:microsoft:office:2010:sp2:x86:::::* cpe:2.3:a:microsoft:office:2010:sp2:x64:::::*	5
Application	Microsoft Office Compatibility Pack cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*	1

Information Assurance Vulnerability Management (IAVM)

Date	Description
2015-06-11	IAVM : 2015-B-0071 - Multiple Vulnerabilities in Microsoft Office (MS15-059) Severity : Category II - VMSKEY : V0060957

Snort® IPS/IDS

Date	Description
2016-03-14	Microsoft Office Word ActiveX object uninitialized memory access attempt RuleID : 37410 - Revision : 2 - Type : FILE-OFFICE
2016-03-14	Microsoft Office Word ActiveX object uninitialized memory access attempt RuleID : 37409 - Revision : 2 - Type : FILE-OFFICE
2015-07-08	Microsoft Office Word ActiveX object uninitialized memory access attempt RuleID : 34744 - Revision : 3 - Type : FILE-OFFICE
2015-07-08	Microsoft Office Word ActiveX object uninitialized memory access attempt RuleID : 34743 - Revision : 3 - Type : FILE-OFFICE
2015-07-08	Microsoft Office Word WordPerfect converter EnumFontFamProc use after free at... RuleID : 34740 - Revision : 3 - Type : FILE-OFFICE
2015-07-08	Microsoft Office Word WordPerfect converter EnumFontFamProc use after free at... RuleID : 34739 - Revision : 3 - Type : FILE-OFFICE
2015-07-08	Microsoft Office Word WordPerfect converter ForeignToRtf32 use after free att... RuleID : 34738 - Revision : 3 - Type : FILE-OFFICE
2015-07-08	Microsoft Office Word WordPerfect converter ForeignToRtf32 use after free att... RuleID : 34737 - Revision : 3 - Type : FILE-OFFICE
2014-01-10	Microsoft product .dll dll-load exploit attempt RuleID : 18495 - Revision : 21 - Type : OS-WINDOWS
2014-01-10	Microsoft product .dll dll-load exploit attempt RuleID : 18494 - Revision : 25 - Type : OS-WINDOWS

Nessus® Vulnerability Scanner

Date	Description
2015-06-09	Name : The remote Windows host is affected by multiple remote code execution vulnera... File : smb_nt_ms15-059.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2015-10-18 17:26:35	Multiple Updates
2015-07-08 21:27:03	Multiple Updates
2015-06-11 00:29:08	Multiple Updates
2015-06-10 13:27:53	Multiple Updates
2015-06-10 09:30:12	Multiple Updates
2015-06-09 21:30:52	Multiple Updates
2015-06-09 21:26:49	Multiple Updates
2015-06-09 21:17:36	First insertion

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	3
CPE ID(s)	6
IAVM(s)	1
Snort® Rule(s)	10
Nessus® Exploit(s)	1

	Related
10	MS15-067
10	MS15-034
10	MS15-002
9.3	MS15-134
9.3	MS15-131
9.3	MS15-130
9.3	MS15-129
9.3	MS15-128
9.3	MS15-127
9.3	MS15-126
9.3	MS15-125
9.3	MS15-124
9.3	MS15-116
9.3	MS15-115
9.3	MS15-114
9.3	MS15-113
9.3	MS15-112
9.3	MS15-110
9.3	MS15-109
9.3	MS15-108
9.3	MS15-106
9.3	MS15-101
9.3	MS15-100
9.3	MS15-099
9.3	MS15-098
9.3	MS15-097
9.3	MS15-095
9.3	MS15-094
9.3	MS15-093
9.3	MS15-092
9.3	MS15-091
9.3	MS15-090
9.3	MS15-082
9.3	MS15-081
9.3	MS15-080
9.3	MS15-079
9.3	MS15-078
9.3	MS15-070
9.3	MS15-066
9.3	MS15-065
9.3	MS15-060
9.3	MS15-057
9.3	MS15-056
9.3	MS15-049
9.3	MS15-048
9.3	MS15-046
9.3	MS15-045
9.3	MS15-044
9.3	MS15-043
9.3	MS15-035
9.3	MS15-033
9.3	MS15-032
9.3	MS15-022
9.3	MS15-021
9.3	MS15-020
9.3	MS15-019
9.3	MS15-018
9.3	MS15-012
9.3	MS15-009
9.3	MS15-004
9.3	MS13-091
9.3	CVE-2015-1760
9.3	CVE-2015-1759
9	MS15-083
8.8	CVE-2015-1770
8.5	MS15-058
8.3	MS15-011
7.8	MS15-030
7.8	MS15-007
7.2	MS15-135
7.2	MS15-133
7.2	MS15-132
7.2	MS15-119
7.2	MS15-117
7.2	MS15-111
7.2	MS15-102
7.2	MS15-085
7.2	MS15-077
7.2	MS15-076
7.2	MS15-073
7.2	MS15-072
7.2	MS15-068
7.2	MS15-061
7.2	MS15-051
7.2	MS15-038
7.2	MS15-037
7.2	MS15-025
7.2	MS15-023
7.2	MS15-015
7.2	MS15-010
7.2	MS15-003
7.2	MS15-001
6.9	MS15-074
6.9	MS15-069
6.9	MS15-063
6.9	MS15-050
6.9	MS15-017
6.8	MS15-120
6.8	MS15-064
6.1	MS15-005
6	MS15-047
5.8	MS15-121
5.8	MS15-040
5	MS15-107
5	MS15-103
5	MS15-075
5	MS15-055
5	MS15-026
4.9	MS15-122
4.7	MS15-008
4.6	MS15-052
4.3	MS15-123
4.3	MS15-118
4.3	MS15-104
4.3	MS15-088
4.3	MS15-087
4.3	MS15-086
4.3	MS15-084
4.3	MS15-062
4.3	MS15-053
4.3	MS15-039
4.3	MS15-036
4.3	MS15-031
4.3	MS15-029
4.3	MS15-027
4.3	MS15-024
4.3	MS15-016
4.3	MS15-013
4	MS15-096
3.3	MS15-071
3.3	MS15-014
2.6	MS15-089
2.6	MS15-041
2.1	MS15-042
2.1	MS15-028
1.9	MS15-105
1.9	MS15-054
1.9	MS15-006
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 138 more Alert(s)

9.3 - MS15-059

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU