This host is missing an important security update according to Microsoft Bulletin MS15-012.

Successful exploitation will allow remote attackers to execute arbitrary code on the affected system. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, https://technet.microsoft.com/en-us/security/bulletin/ms15-012

A remote code execution vulnerability exists in Microsoft office Web Apps that is caused by improperly handling objects in memory while parsing specially crafted Office files.

Microsoft Web Applications 2010 Service Pack 2 and prior.

Get the vulnerable file version and check appropriate patch is applied or not.

• https://support.microsoft.com/kb/2956070
• https://support.microsoft.com/kb/3032328
• https://technet.microsoft.com/en-us/security/bulletin/ms15-012

---

Updated on 2015-03-25