Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2015-1641

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Word等都是美国微软（Microsoft）公司的Office系列产品。Word是一套文字处理软件。Office Compatibility Pack SP3是一套Office兼容包。Word Viewer是一套免费的Office Word文档查看器。 Microsoft Office软件中存在远程执行代码漏洞，该漏洞源于程序没有正确处理内存中的丰富的文本格式文件。攻击者可通过使用经特殊设计的文件，利用该漏洞在当前用户的安全上下文中执行操作。以下产品受到影响：Microsoft Wor

AI Predicted 9.8 Difficulty: Easy KEV EPSS 96.76% · P100
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-1641

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Office 内存损坏漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Word等都是美国微软（Microsoft）公司的Office系列产品。Word是一套文字处理软件。Office Compatibility Pack SP3是一套Office兼容包。Word Viewer是一套免费的Office Word文档查看器。 Microsoft Office软件中存在远程执行代码漏洞，该漏洞源于程序没有正确处理内存中的丰富的文本格式文件。攻击者可通过使用经特殊设计的文件，利用该漏洞在当前用户的安全上下文中执行操作。以下产品受到影响：Microsoft Wor
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-1641

# POC Description Source Link Shenlong Link
1 Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents https://github.com/Cyberclues/rtf_exploit_extractor POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-1641

请登录查看更多情报信息。

Vendor Advisories for CVE-2015-1641 (3)

Same Patch Batch · n/a · 2015-04-14 · 64 CVEs total

CVE-2015-1657 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-3293 Fortinet FortiMail 安全漏洞
CVE-2014-9311 WordPress Shareaholic插件跨站脚本漏
CVE-2014-9146 Fiyo CMS 跨站脚本漏洞
CVE-2014-9145 Fiyo CMS SQL注入漏洞
CVE-2015-1665 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-1662 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-1661 Microsoft Internet Explorer ASLR 绕过漏洞
CVE-2015-1660 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-1659 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-1666 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-1653 Microsoft SharePoint 跨站脚本漏洞
CVE-2015-1652 Microsoft Internet Explorer 内存损坏漏洞
CVE-2015-1651 Microsoft Office组件释放后使用漏洞
CVE-2015-1650 Microsoft Office组件释放后使用漏洞
CVE-2015-1649 Microsoft Office组件释放后使用漏洞
CVE-2015-1648 Microsoft .NET Framework ASP.NET 信息泄漏漏洞
CVE-2015-1647 Microsoft Windows Hyper-V 拒绝服务漏洞
CVE-2015-1646 Microsoft MSXML同源策略安全功能绕过漏洞
CVE-2015-1645 Microsoft Windows EMF处理远程执行代码漏洞

Showing top 20 of 64 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-1641

No comments yet

Leave a comment