Lucene search

K
cve[email protected]CVE-2015-2545
HistorySep 09, 2015 - 12:59 a.m.

CVE-2015-2545

2015-09-0900:59:52
CWE-20
web.nvd.nist.gov
870
In Wild
microsoft office
arbitrary code execution
crafted eps image
cve-2015-2545
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.97 High

EPSS

Percentile

99.8%

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka “Microsoft Office Malformed EPS File Vulnerability.”

Affected configurations

NVD
Node
microsoftofficeMatch2007sp3
OR
microsoftofficeMatch2010sp2x64
OR
microsoftofficeMatch2010sp2x86
OR
microsoftofficeMatch2013sp1
OR
microsoftofficeMatch2013sp1rt

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.97 High

EPSS

Percentile

99.8%