{"id":"CVE-2015-0097","published":"2015-03-11T10:00:00Z","modified":"2024-08-06T03:55:28Z","title":"Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka \"Microsoft Word Local Zone Remote Code Execution Vulnerability.\"","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in Microsoft Office 2007 SP3 and 2010 SP2 (Excel, PowerPoint, and Word) lets code execution occur through the Office applications' handling of crafted documents. An attacker who supplies a malicious Office document can run arbitrary code remotely, with the user needing to open that file for the attack to succeed.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:49Z"},"cvss":null,"epss":{"score":0.40942,"percentile":0.98653,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":2,"pulses":[{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"},{"name":"CVE-2015-0097 Exploited in the Wild","url":"https://otx.alienvault.com/pulse/55ba81ce67db8c6f0af57dfe","created":"2015-07-30"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://www.exploit-db.com/exploits/37657/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securitytracker.com/id/1031896","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022","tags":["vendor-advisory","x_refsource_MS"]}],"techniques":[],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"CVE-2015-0097 Word HTA Microsoft Word MS15-022","start":98510,"end":98556},{"quote":"51\r\nCVE-2012-0158, 52\r\nCVE-2012-0507, 47, 49\r\nCVE-2012-1723, 47, 48, 49\r\nCVE-2012-1889, 54\r\nCVE-2013-0074, 46\r\nCVE-2013-0422, 47, 49\r\nCVE-2013-2460, 46\r\nCVE-2013-2551, 46, 54\r\nCVE-2013-7331, 54\r\nCVE-2014-0322, 54\r\nCVE-2014-0497, 53\r\nCVE-2014-0515, 53\r\nCVE-2014-6332, 43, 44, 50\r\nCVE-2014-8439, 46, 53\r\nCVE-2015-0097,","start":238076,"end":238392}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2015-0135","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0135","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":37657,"url":"https://www.exploit-db.com/exploits/37657","title":"Microsoft Word - Local Machine Zone Code Execution (MS15-022)","type":"local","platform":"windows","date":"2015-07-20","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2015-07-20"},"first":{"date":"2015-07-20","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/37657"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/37657/"],"flow":[],"timeline":[{"date":"2015-03-11","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-0097","provenance":"source"},{"date":"2015-07-20","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-37657)","url":"https://www.exploit-db.com/exploits/37657","provenance":"source"}],"speed":{"daysToPublicExploit":131,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":29.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.73,"detail":"percentile 0.9865"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}