{"id":"CVE-2015-2424","kind":"vulnerability","aliases":["CVE-2015-2424"],"related":[],"title":"Microsoft PowerPoint: Microsoft PowerPoint Memory Corruption Vulnerability","description":"Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","summary":"Microsoft PowerPoint has a memory corruption flaw triggered by a crafted Office document. An attacker can run code on the victim's machine or crash PowerPoint.","severity":"critical","cvss":9.3,"epss":0.40388,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Microsoft PowerPoint","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","microsoft-office","package","powerpoint","windows"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Microsoft security update for PowerPoint per vendor instructions; the specific patch is not named in the sources.","status":"open","published_at":"2015-07-14T21:59:35+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:24:33+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T21:24:33Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft security update for PowerPoint per vendor instructions; the specific patch is not named in the sources.","reach":"internet","impact":"high","summary":"Microsoft PowerPoint has a memory corruption flaw triggered by a crafted Office document. An attacker can run code on the victim's machine or crash PowerPoint.","category":"package","who_cares":["powerpoint","windows","microsoft-office"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code when victim opens a crafted document","analyst_note":"Confirm patched PowerPoint build and KB number at the Microsoft security advisory for CVE-2015-2424 and add a check command if one exists.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000446,"input_tokens":2837,"output_tokens":324,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2015':9A,12A '-2424':10A,13A '2007':51C,54C '2010':57C,60C '2013':63C,66C,70C 'aka':93C 'allow':73C 'arbitrari':78C 'attack':37B,75C 'caus':81C 'code':40B,79C 'corrupt':6A,28B,87C,97C 'craft':33B,90C 'crash':47B 'cve':8A,11A 'denial':83C 'document':35B,92C 'execut':77C 'exploit':16B 'flaw':29B 'machin':45B 'memori':5A,27B,86C,96C 'microsoft':1A,3A,14A,18B,23B,49C,94C 'microsoft-offic':17B 'offic':19B,34B,91C,95C 'packag':20B 'powerpoint':2A,4A,15A,21B,24B,48B,50C,56C,62C,69C 'remot':74C 'rt':71C 'run':39B 'servic':85C 'sp1':64C,67C,72C 'sp2':58C,61C 'sp3':52C,55C 'trigger':30B 'via':88C 'victim':43B 'vulner':7A,98C 'window':22B 'word':53C,59C,65C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2015-07-14T21:59:35+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2015-2424","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2424","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:07+00:00","note":null},{"source":"epss","external_id":"CVE-2015-2424","url":"https://api.first.org/data/v1/epss?cve=CVE-2015-2424","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2015-2424","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2424","severity":null,"published_at":"2015-07-14T21:59:35+00:00","modified_at":"2026-06-17T00:24:04+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}