CVE:CVE-2015-1650
CNNVD:CNNVD-201504-245
Microsoft Word等都是美国微软（Microsoft）公司的Office系列产品。Word是一套文字处理软件。Office Compatibility Pack SP3是一套Office兼容包。Word Viewer是一套免费的Office Word文档查看器。
Microsoft Office软件中存在远程执行代码漏洞，该漏洞源于程序在分析经特殊设计的Office文件时没有正确处理内存对象。攻击者可利用该漏洞执行任意代码，从而损坏系统内存。以下产品受到影响：Microsoft Word 2007 SP3，Office 2010 SP2，Word 2010 SP2，Word 2013 SP1，Word 2013 RT SP1，Word Viewer，Office Compatibility Pack SP3，SharePoint Server 2010 SP2和2013 SP1上的Word Automation Services，Office Web Apps Server 2010 SP2和2013 SP1。
solution:Upgrade microsoft office to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft office_compatibility_pack to a higher version than *:sp3,and avoid the version *:sp3; Upgrade microsoft office_web_apps to a higher version than 2010:sp2,2013:sp1,and avoid the version 2010:sp2,2013:sp1; Upgrade microsoft sharepoint_server to a higher version than 2010:sp2,2013:sp1,and avoid the version 2010:sp2,2013:sp1; Upgrade microsoft word to a higher version than 2007:sp3,2010:sp2,2013:sp1,and avoid the version 2007:sp3,2010:sp2,2013:sp1; Upgrade microsoft word_viewer to a higher version than *