CVE:CVE-2015-0064
CNNVD:CNNVD-201502-244
Microsoft Word、Office和Word Automation Services都是美国微软（Microsoft）公司的产品。Office是一款办公软件套件产品；Word是Office套件中的一款文字处理软件；Word Automation Services是一项新的SharePoint Server 2010技术，它允许以无人参与的方式从服务器端转换Microsoft Word支持的文档。
由于Microsoft Word在分析经特殊设计的Office文件时没有正确处理内存对象，导致Word中存在一个远程代码执行漏洞。此漏洞可能会允许攻击者执行任意代码，从而损坏系统内存。以下产品和版本受到影响：Microsoft Word 2007 SP3，Office 2010 SP2，Word 2010 SP2，SharePoint Server 2010，Web Applications 2010 SP2，Word Viewer，Office Compatibility Pack SP3。
solution:Upgrade microsoft web_applications to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft office_compatibility_pack to a higher version than *:sp3,and avoid the version *:sp3; Upgrade microsoft word_automation_services to a higher version than -; Upgrade microsoft word to a higher version than 2007:sp3,2010:sp2,and avoid the version 2007:sp3,2010:sp2; Upgrade microsoft word_viewer to a higher version than *; Upgrade microsoft office to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft sharepoint_server to a higher version than 2010,and avoid the version 2010