Lucene search

[email protected]CVE-2015-2468

HistoryAug 15, 2015 - 12:59 a.m.

CVE-2015-2468

2015-08-1500:59:27

CWE-119

[email protected]

web.nvd.nist.gov

microsoft

office

remote code execution

vulnerability

memory corruption

cve-2015-2468

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.794 High

EPSS

Percentile

98.3%

JSON

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftofficeMatch2010sp2

microsoftofficeMatch2011mac

microsoftofficeMatch2016mac

microsoftoffice_compatibility_packsp3

microsoftsharepoint_serverMatch2010sp2

microsoftsharepoint_serverMatch2013sp1

microsoftwordMatch2007sp3

microsoftwordMatch2010sp2

microsoftwordMatch2013sp1

microsoftwordMatch2013sp1rt

microsoftword_viewer

microsoftword_web_appsMatch2010sp2

microsoftword_web_apps_serverMatch2013sp1

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2010
microsoft:officemicrosoft officeeq2011
microsoft:officemicrosoft officeeq2016
microsoft:office_compatibility_packmicrosoft office compatibility packeq*
microsoft:sharepoint_servermicrosoft sharepoint servereq2010
microsoft:sharepoint_servermicrosoft sharepoint servereq2013
microsoft:wordmicrosoft wordeq2007
microsoft:wordmicrosoft wordeq2010
microsoft:wordmicrosoft wordeq2013
microsoft:word_viewermicrosoft word viewereq*

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2010
microsoft:office	microsoft office	eq	2011
microsoft:office	microsoft office	eq	2016
microsoft:office_compatibility_pack	microsoft office compatibility pack	eq	*
microsoft:sharepoint_server	microsoft sharepoint server	eq	2010
microsoft:sharepoint_server	microsoft sharepoint server	eq	2013
microsoft:word	microsoft word	eq	2007
microsoft:word	microsoft word	eq	2010
microsoft:word	microsoft word	eq	2013
microsoft:word_viewer	microsoft word viewer	eq	*