Unrated severityNVD Advisory· Published Oct 14, 2015· Updated May 6, 2026

CVE-2015-2557

Description

Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML data in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

Microsoft/Visio2 versions
cpe:2.3:a:microsoft:visio:2007:sp3:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:visio:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securitytracker.com/id/1033803nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-15-519nvdThird Party AdvisoryVDB Entry
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.028
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000