9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.894 High
EPSS
Percentile
98.8%
An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document.
CVE-2015-1683 critical
CVE-2015-1682 critical
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.
support.microsoft.com/kb/2956140
support.microsoft.com/kb/2956193
support.microsoft.com/kb/2956194
support.microsoft.com/kb/2956195
support.microsoft.com/kb/2965233
support.microsoft.com/kb/2965237
support.microsoft.com/kb/2965240
support.microsoft.com/kb/2965242
support.microsoft.com/kb/2965282
support.microsoft.com/kb/2965307
support.microsoft.com/kb/2965311
support.microsoft.com/kb/2975808
support.microsoft.com/kb/2975816
support.microsoft.com/kb/2986216
support.microsoft.com/kb/2999412
support.microsoft.com/kb/2999420
support.microsoft.com/kb/3017815
support.microsoft.com/kb/3023055
support.microsoft.com/kb/3039725
support.microsoft.com/kb/3039736
support.microsoft.com/kb/3039748
support.microsoft.com/kb/3057181
support.microsoft.com/kb/3062536
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-1682
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-1683
statistics.securelist.com/
technet.microsoft.com/en-us/library/security/ms15-046
threats.kaspersky.com/en/product/Microsoft-Office/
threats.kaspersky.com/en/product/Microsoft-Sharepoint-Server/