Lucene search

K
cve[email protected]CVE-2015-6091
HistoryNov 11, 2015 - 12:59 p.m.

CVE-2015-6091

2015-11-1112:59:30
CWE-119
web.nvd.nist.gov
37
microsoft
office
memory corruption
vulnerability
cve-2015-6091
word 2007
office 2010
word 2010
word 2013
word 2016
word viewer

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.17 Low

EPSS

Percentile

96.1%

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftofficeMatch2010sp2
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp2
OR
microsoftwordMatch2013sp1
OR
microsoftwordMatch2013sp1rt
OR
microsoftwordMatch2016
OR
microsoftword_viewer

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.17 Low

EPSS

Percentile

96.1%