Oval Definition:oval:org.mitre.oval:def:28531
Revision Date:2015-07-27Version:5
Title:Microsoft Office uninitialized memory use vulnerability – CVE-2015-1770 (MS15-059)
Description:Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-1770
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office 2013
Definition Synopsis
  • Microsoft Office 2013 is installed
  • AND vulnerable file
  • Check if the version of Wpft532.cnv is greater than or equal to 2012.1500.0000.0000 and less than 2012.1500.4727.1000
  • OR Check if the version of osf.dll is less than 15.0.4725.1000
  • BACK