KLA10675 Multiple vulnerabilities in Microsoft Office

🗓️ 13 Oct 2015 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 46 Views

Multiple serious vulnerabilities found in Microsoft Office. Malicious users can exploit them to bypass security, execute arbitrary code, or obtain sensitive information. Technical details for exploiting certain vulnerabilities provided

Reporter	Title	Published	Views	Family All 61
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.	29 Oct 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server corporate application allows a hacker to read arbitrary files.	29 Oct 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visio graphical editor, allowing a hacker to execute arbitrary code	29 Oct 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Excel editors, programs for viewing Xls and Xlsx files (Excel Viewer), the Microsoft SharePoint Server corporate application suite, and the Microsoft Office Compatibility Pack enable a hacker to execute arbitrary code.	29 Oct 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server corporate application package and the Microsoft SharePoint Foundation software for electronic document management allows a perpetrator to inject arbitrary web or HTML code.	29 Oct 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server corporate application package and the Microsoft SharePoint Foundation software for electronic document management allows a perpetrator to inject arbitrary web or HTML code.	29 Oct 201500:00	–	bdu_fstec
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2015-06635)	15 Oct 201500:00	–	cnvd
CNVD	Microsoft Office Web Apps Cross-Site Scripting Vulnerability	15 Oct 201500:00	–	cnvd
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2015-06637)	15 Oct 201500:00	–	cnvd
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2015-06638)	15 Oct 201500:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-2555
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6039
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6037
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-2557
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-2556
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-2558
threats	www.threats.kaspersky.com/en/product/Microsoft-Visio-2010/
threats	www.threats.kaspersky.com/en/product/Microsoft-Excel/
threats	www.threats.kaspersky.com/en/product/Microsoft-Sharepoint-Server/
support	www.support.microsoft.com/kb/3085571

02 Apr 2025 00:00Current

8High risk

Vulners AI Score8

CVSS 29.3

EPSS0.23007