CVE-2015-2523

2015-09-0900:59:00

CWE-119

[email protected]

web.nvd.nist.gov

microsoft excel

remote code execution

office document

cve-2015-2523

memory corruption

vulnerability

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.957 High

EPSS

Percentile

99.4%

JSON

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:excelmicrosoft exceleq2013
microsoft:excelmicrosoft exceleq2011
microsoft:excel_viewermicrosoft excel viewereq*
microsoft:office_compatibility_packmicrosoft office compatibility packeq*
microsoft:excelmicrosoft exceleq2016
microsoft:excelmicrosoft exceleq2007
microsoft:excelmicrosoft exceleq2010

CPE	Name	Operator	Version
microsoft:excel	microsoft excel	eq	2013
microsoft:excel	microsoft excel	eq	2011
microsoft:excel_viewer	microsoft excel viewer	eq	*
microsoft:office_compatibility_pack	microsoft office compatibility pack	eq	*
microsoft:excel	microsoft excel	eq	2016
microsoft:excel	microsoft excel	eq	2007
microsoft:excel	microsoft excel	eq	2010