Title

Microsoft Office Security Feature Bypass Vulnerability (MS15-013) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a security bypass vulnerability in Microsoft Office. To exploit this vulnerability a user opens a specially crafted Microsoft Office file. If successfully exploited, an attacker could use this security feature bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-58757

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.