Lucene search

K
nvd[email protected]NVD:CVE-2015-0063
HistoryFeb 11, 2015 - 3:01 a.m.

CVE-2015-0063

2015-02-1103:01:06
CWE-399
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.167 Low

EPSS

Percentile

96.1%

Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Excel Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftoffice_compatibility_packsp3
Node
microsoftexcel_viewer
Node
microsoftexcelMatch2007sp3
OR
microsoftexcelMatch2010sp2x64
OR
microsoftexcelMatch2010sp2x86
OR
microsoftexcelMatch2013
OR
microsoftexcelMatch2013sp3
Node
microsoftofficeMatch2010sp2x64
OR
microsoftofficeMatch2010sp2x86

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.167 Low

EPSS

Percentile

96.1%