Lucene search

K
cve[email protected]CVE-2015-0064
HistoryFeb 11, 2015 - 3:01 a.m.

CVE-2015-0064

2015-02-1103:01:07
CWE-399
web.nvd.nist.gov
32
cve-2015-0064
microsoft word
office 2010
sharepoint server 2010
remote code execution
memory corruption

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.956 High

EPSS

Percentile

99.4%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Office Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftweb_applicationsMatch2010sp2
Node
microsoftoffice_compatibility_packsp3
Node
microsoftword_automation_servicesMatch-
Node
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp2
OR
microsoftword_viewer
Node
microsoftofficeMatch2010sp2x64
OR
microsoftofficeMatch2010sp2x86
Node
microsoftsharepoint_serverMatch2010

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.956 High

EPSS

Percentile

99.4%