CVE-2015-2375

2015-07-1421:59:00

CWE-200

[email protected]

web.nvd.nist.gov

microsoft

excel

aslr

bypass

vulnerability

cve-2015-2375

nvd

spreadsheet

sharepoint

remote attack

6.4 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.529 Medium

EPSS

Percentile

97.6%

JSON

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka “Microsoft Excel ASLR Bypass Vulnerability.”

CPENameOperatorVersion
microsoft:excelmicrosoft exceleq2013
microsoft:excelmicrosoft exceleq2010
microsoft:sharepoint_servermicrosoft sharepoint servereq2010
microsoft:sharepoint_servermicrosoft sharepoint servereq2013
microsoft:excel_viewermicrosoft excel viewereq2007

CPE	Name	Operator	Version
microsoft:excel	microsoft excel	eq	2013
microsoft:excel	microsoft excel	eq	2010
microsoft:sharepoint_server	microsoft sharepoint server	eq	2010
microsoft:sharepoint_server	microsoft sharepoint server	eq	2013
microsoft:excel_viewer	microsoft excel viewer	eq	2007