High severity7.8CISA KEVNVD Advisory· Published Sep 9, 2015· Updated Apr 22, 2026
CVE-2015-2545
CVE-2015-2545
Description
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability."
Affected products
5cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:-:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:-:*:-:*:-:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099nvdPatchVendor Advisory
- blog.morphisec.com/exploit-bypass-emet-cve-2015-2545nvdExploitThird Party Advisory
- www.securitytracker.com/id/1033488nvdBroken LinkThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.