Home / bulletins

MS15-069 - Important: Vulnerabilities in Windows Could Allow Remote Code Execution (3072631) - Version: 1.0

Posted on 15 July 2015

There is an newer version: MS15-069 - Version: 1.1

Important

Severity Rating: Important
Revision Note: V1.0 (July 14, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow Remote Code Execution if an attacker first places a specially crafted dynamic link library (DLL) file in the target user’s current working directory and then convinces the user to open an RTF file or to launch a program that is designed to load a trusted DLL file but instead loads the attacker’s specially crafted DLL file. An attacker who successfully exploited the vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Link

Other versions

 

TOP