Remote Code Execution in Microsoft Office via Malformed EPS Files (CVE‑2015‑2545)
What It Is — Microsoft Office can be tricked into executing arbitrary code when a specially crafted EPS (Encapsulated PostScript) image is opened. The flaw resides in the Office rendering engine that parses EPS content.
Exploitability — Publicly disclosed; proof‑of‑concept code is available; CVSS v3 base score 7.8 (High). No confirmed large‑scale campaign, but the attack vector is trivial—any user who opens a malicious document is compromised.
Affected Products — Microsoft Office 2007, 2010, 2013, 2016, and Office 365 desktop clients on Windows.
Why It Matters for Trust & Control Assurance
- Highlights the need for a continuous vulnerability‑management program that inventories, prioritizes, and patches software on schedule.
- Provides audit‑ready evidence that organizations are applying security updates within defined service‑level windows.
- Aligns with the control objective of secure configuration and change management, which maps to many frameworks (e.g., NIST CSF, ISO 27001).
Recommended Actions
- Verify that the latest security updates for the affected Office versions are deployed across the environment.
- Enable Office’s Protected View and restrict opening of files from untrusted sources.
- Update your vulnerability‑management tooling to flag CVE‑2015‑2545 and capture remediation evidence for audit purposes.
Source: NVD – CVE‑2015‑2545