CVE-2015-6091

2015-11-1112:59:30

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.357

Percentile

97.2%

JSON

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftofficeMatch2010sp2

microsoftwordMatch2007sp3

microsoftwordMatch2010sp2

microsoftwordMatch2013sp1

microsoftwordMatch2013sp1rt

microsoftwordMatch2016

microsoftword_viewer

VendorProductVersionCPE
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
microsoftword2010cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
microsoftword2013cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
microsoftword2013cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
microsoftword2016cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
microsoftword_viewer*cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2::::::
microsoft	word	2007	cpe:2.3:a:microsoft:word:2007:sp3::::::
microsoft	word	2010	cpe:2.3:a:microsoft:word:2010:sp2::::::
microsoft	word	2013	cpe:2.3:a:microsoft:word:2013:sp1::::::
microsoft	word	2013	cpe:2.3:a:microsoft:word:2013:sp1:::rt:::*
microsoft	word	2016	cpe:2.3:a:microsoft:word:2016:::::::*
microsoft	word_viewer	*	cpe:2.3:a:microsoft:word_viewer::::::::