CVE:CVE-2015-2431
CNNVD:CNNVD-201508-170
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。
当Microsoft Office无法正确处理Office图形库(OGL)字体时存在远程代码执行漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。以下版本受到影响：Microsoft Office 2007 SP3和2010 SP2，Live Meeting 2007 Console，Lync 2010，Lync 2010 Attendee，Lync 2013 SP1，Lync Basic 2013 SP1。
solution:Upgrade microsoft live_meeting to a higher version than 2007,and avoid the version 2007; Upgrade microsoft lync to a higher version than 2010,and avoid the version 2010; Upgrade microsoft lync_basic to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft office to a higher version than 2010:sp2,and avoid the version 2010:sp2