Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.”
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1642
Reference (s):
- IDEFENSE:20150901 Microsoft Word “TaskSymbol Control” Use After Free Vulnerability
- URL: https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1203
- MS:MS15-081
- URL: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081
- SECTRACK:1033239