HTTP: Microsoft Word CVE-2015-0097 Arbitrary Code Execution
This signature detects attempts to exploit a known vulnerability against Microsoft Word. A successful exploit can lead to remote code execution.
Extended Description
Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."
Affected Products
Microsoft word
References
CVE: CVE-2015-0097
Short Name
HTTP:STC:DL:MS-CVE-2015-0097-CE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary CVE-2015-0097 Code Execution Microsoft Word
Release Date
03/10/2015
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3