Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Micr…

Timeline

Detection, updates, and resolution for this record.

1. Aug 15, 2015 · NIST NVD

   Detected

   Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

2. Jun 17, 2026 · NIST NVD

   Updated

   Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

3. Oct 14, 2026 · NIST NVD

   Updated

   Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected

• cpe microsoft/office2007
• cpe microsoft/office2011
• cpe microsoft/office2016
• cpe microsoft/word viewerversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2015-2477

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2015-2477

  30-day exploitation probability 13.6%

  first.org
• NIST NVDVulnerability recordCVE-2015-2477

  Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

  nvd.nist.gov

References

• Reference · securitytracker.com
• Reference · docs.microsoft.com