CVE-2015-0097

2015-03-1110:59:23

CWE-19

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.751

Percentile

98.2%

JSON

Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Word Local Zone Remote Code Execution Vulnerability.”

Affected configurations

Nvd

Node

microsoftexcelMatch2007sp3

microsoftexcelMatch2010sp2x86

microsoftpowerpointMatch2007sp3

microsoftpowerpointMatch2010sp2

microsoftwordMatch2007sp3

microsoftwordMatch2010sp2

VendorProductVersionCPE
microsoftexcel2007cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
microsoftexcel2010cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x86:*
microsoftexcel2010cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:x86:*:*
microsoftpowerpoint2007cpe:2.3:a:microsoft:powerpoint:2007:sp3:*:*:*:*:*:*
microsoftpowerpoint2010cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
microsoftword2010cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel	2007	cpe:2.3:a:microsoft:excel:2007:sp3::::::
microsoft	excel	2010	cpe:2.3:a:microsoft:excel:2010:sp2:::::x86:*
microsoft	excel	2010	cpe:2.3:a:microsoft:excel:2010:sp2::::x86::*
microsoft	powerpoint	2007	cpe:2.3:a:microsoft:powerpoint:2007:sp3::::::
microsoft	powerpoint	2010	cpe:2.3:a:microsoft:powerpoint:2010:sp2::::::
microsoft	word	2007	cpe:2.3:a:microsoft:word:2007:sp3::::::
microsoft	word	2010	cpe:2.3:a:microsoft:word:2010:sp2::::::