{"id":"CVE-2015-2545","kind":"vulnerability","aliases":["CVE-2015-2545"],"related":[],"title":"Microsoft Office: Microsoft Office Malformed EPS File Vulnerability","description":"Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka \"Microsoft Office Malformed EPS File Vulnerability.\"","summary":"Microsoft Office mishandles a crafted EPS image file, letting an attacker run arbitrary code. CISA lists it as actively exploited in the wild.","severity":"critical","cvss":9.3,"epss":0.85937,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Microsoft Office","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","microsoft-office","windows"],"not_affected_if":["office-not-installed"],"how_to_check":null,"fix":"Apply the Microsoft Office updates per vendor instructions; specific patched build numbers are not in the sources.","status":"open","published_at":"2015-09-09T00:59:52+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:24:03+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:24:03Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft Office updates per vendor instructions; specific patched build numbers are not in the sources.","reach":"internet","impact":"high","summary":"Microsoft Office mishandles a crafted EPS image file, letting an attacker run arbitrary code. CISA lists it as actively exploited in the wild.","category":"infrastructure","who_cares":["microsoft-office","windows"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the machine opening the crafted file.","analyst_note":"Find the Microsoft security bulletin for CVE-2015-2545 and the affected Office build numbers; the sources give no versions or check steps.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["office-not-installed"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000439,"input_tokens":2808,"output_tokens":317,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2015':10A,13A '-2545':11A,14A '2007':48C '2010':50C '2013':52C,55C 'activ':41B 'aka':70C 'allow':58C 'arbitrari':35B,63C 'attack':33B,60C 'cisa':37B 'code':36B,64C 'craft':27B,67C 'cve':9A,12A 'ep':6A,28B,68C,74C 'execut':62C 'exploit':17B,42B 'file':7A,30B,75C 'imag':29B,69C 'infrastructur':18B 'let':31B 'list':38B 'malform':5A,73C 'microsoft':1A,3A,15A,20B,23B,46C,71C 'microsoft-offic':19B 'mishandl':25B 'offic':2A,4A,21B,24B,47C,72C 'office':16A 'remot':59C 'rt':56C 'run':34B 'sp1':53C,57C 'sp2':51C 'sp3':49C 'via':65C 'vulner':8A,76C 'wild':45B 'window':22B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2015-09-09T00:59:52+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2015-2545","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2545","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T14:39:41+00:00","note":null},{"source":"epss","external_id":"CVE-2015-2545","url":"https://api.first.org/data/v1/epss?cve=CVE-2015-2545","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2015-2545","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2545","severity":null,"published_at":"2015-09-09T00:59:52+00:00","modified_at":"2026-06-17T00:24:16+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}