Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-1641
HistoryApr 14, 2015 - 8:59 p.m.

CVE-2015-1641

2015-04-1420:59:05
CWE-787
[email protected]
web.nvd.nist.gov
10

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.89

Percentile

98.8%

JSON

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka β€œMicrosoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftofficeMatch2010sp2
OR
microsoftoffice_compatibility_packMatch-sp3
OR
microsoftoffice_web_appsMatch2010sp2
OR
microsoftoffice_web_appsMatch2013sp1
OR
microsoftoutlookMatch2011mac_os_x
OR
microsoftsharepoint_serverMatch2010sp2
OR
microsoftsharepoint_serverMatch2013sp1
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp2
OR
microsoftwordMatch2011macos
OR
microsoftwordMatch2013sp1-
OR
microsoftwordMatch2013sp1rt
VendorProductVersionCPE
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
microsoftoffice_compatibility_pack-cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
microsoftoffice_web_apps2010cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
microsoftoffice_web_apps2013cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
microsoftoutlook2011cpe:2.3:a:microsoft:outlook:2011:*:*:*:*:mac_os_x:*:*
microsoftsharepoint_server2010cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
microsoftsharepoint_server2013cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
microsoftword2010cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
microsoftword2011cpe:2.3:a:microsoft:word:2011:*:*:*:*:macos:*:*
Rows per page:
1-10 of 121

Related

cvelist 1
threatpost 4
symantec 1
cisa_kev 1
checkpoint_advisories 1
prion 1
securelist 2
attackerkb 1
cve 1
myhack58 2
openvas 5
seebug 1
carbonblack 1
nessus 2
fireeye 2
mskb 1
ics 1
securityvulns 1
qualysblog 1
cvelist
cvelist
CVE-2015-1641
2015-04-14 20:00:00
threatpost
threatpost
Nigerian BEC Scams Hit 500 Companies in 50 Countries
2017-06-15 14:28:19
Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
2022-02-11 19:57:34
April 2015 Microsoft Patch Tuesday Security Bulletins
2015-04-14 14:49:25
symantec
symantec
Microsoft Office CVE-2015-1641 Memory Corruption Vulnerability
2015-04-14 00:00:00
cisa_kev
cisa_kev
Microsoft Office Memory Corruption Vulnerability
2021-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption (MS15-033: CVE-2015-1641)
2015-04-14 00:00:00
prion
prion
Memory corruption
2015-04-14 20:59:00
securelist
securelist
A simple example of a complex cyberattack
2017-09-25 12:23:47
Nigerian phishing: Industrial companies under attack
2017-06-15 09:00:04
attackerkb
attackerkb
CVE-2015-1641
2015-04-14 00:00:00
cve
cve
CVE-2015-1641
2015-04-14 20:59:05
myhack58
myhack58
Hand to hand teach you how to construct the office exploits EXP（fourth periodοΌ‰-bug warning-the black bar safety net
2016-12-03 00:00:00
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
openvas
openvas
Microsoft Office Word Remote Code Execution Vulnerabilities (3048019) - Mac OS X
2015-04-15 00:00:00
Microsoft SharePoint Server WAS Multiple Vulnerabilities (3048019)
2015-04-15 00:00:00
Microsoft Office Web Apps Multiple Vulnerabilities (3048019)
2015-04-15 00:00:00
seebug
seebug
Microsoft Office ε†…ε­˜ζŸεζΌζ΄ž(CVE-2015-1641)
2015-12-31 00:00:00
carbonblack
carbonblack
Threat Analysis: Pylot (Travle) Malware Family
2018-01-26 17:46:11
nessus
nessus
MS15-033: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019)
2015-04-14 00:00:00
MS15-033: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019)
2015-04-14 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
mskb
mskb
MS15-033: Vulnerabilities in Office could allow remote code execution: April 14, 2015
2015-04-14 00:00:00
ics
ics
Top 10 Routinely Exploited Vulnerabilities
2020-05-12 12:00:00
securityvulns
securityvulns
Microsoft Office and Sharepoint multiple security vulnerabilities
2015-04-16 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.89

Percentile

98.8%

JSON
Related for NVD:CVE-2015-1641
cvelist1threatpost4symantec1cisa_kev1checkpoint_advisories1prion1securelist2attackerkb1cve1myhack582openvas5seebug1carbonblack1nessus2fireeye2mskb1ics1securityvulns1qualysblog1