Lucene search

K
cve[email protected]CVE-2015-2378
HistoryJul 14, 2015 - 9:59 p.m.

CVE-2015-2378

2015-07-1421:59:00
NVD-CWE-Other
web.nvd.nist.gov
37
cve-2015-2378
microsoft excel
vulnerability
remote code execution
nvd

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.317 Low

EPSS

Percentile

97.0%

Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka “Microsoft Excel DLL Remote Code Execution Vulnerability.”

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.317 Low

EPSS

Percentile

97.0%