Intrusion PreventionMS.Office.Word.File.Winword.Memory.Corruption
Description
This indicates an attack attempt against a remote Code Execution vulnerability in Microsoft Office.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted DOCX file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application, via a crafted DOCX file.
Affected Products
Miscrosoft Office 2007
Miscrosoft Office 2010
Miscrosoft Office 2013
Miscrosoft Office 2013 RT
Miscrosoft SharePoint Server 2007
Miscrosoft SharePoint Server 2010
Miscrosoft SharePoint Server 2013
Miscrosoft Office Web Apps 2010
Miscrosoft Office Web Apps 2013
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://technet.microsoft.com/security/bulletin/MS15-022
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 40220 |
| Created | Mar 11, 2015 |
| Updated | May 30, 2016 |
| Risk |
|
| CVE ID | CVE-2015-0085 |
| Exploit Prediction Score | 90.99% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |