CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-04-14
Microsoft Office RTF Memory Corruption Vulnerability (CVE-2015-1641, MS15-033) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Word 2007/2010/2013, Office 2010/2013, Word for Mac 2011, SharePoint Server 2010/2013, and Office Web Apps Server 2010/2013
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by enticing them to open a specially crafted RTF document
[Mitigation] Immediately apply the official Microsoft security updates (MS15-033) or implement registry-based File Block policies to restrict RTF parsing