CVE-2015-2377

CVE-2015-2377 affects Microsoft Office components (Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3) and is caused by memory corruption when parsing crafted Office documents, enabling remote code execution or a denial of service. Multiple connec...

CVE-2015-2415

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-2376

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allo...

CVE-2015-2377

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-2378

Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Microsoft Excel DLL Remote Code Execution Vulnerability."...

CVE-2015-2378

CVE-2015-2378 is an Untrusted Search Path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3. The root cause is DLL loading from the current working directory (Trojan horse DLL) that enables local privilege elevation. Documents indi...

Microsoft Excel ASLR Bypass (MS15-070; CVE-2015-2375)

A security feature bypass vulnerability exists in Microsoft Excel. The vulnerability is caused when memory is released in an unintended manner. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Excel file...

PT-2015-5733

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2010 SP2 through 2013 SP1 Excel Viewer version 2007 SP3 Excel Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Description A security feature bypass issue exists in Microsoft Excel, allowing remote...

Microsoft Office CVE-2015-2377 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Microsoft Excel DLL Remote Code Execution (MS15-070; CVE-2015-2378)

A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to the way that Microsoft Excel improperly handles the loading of dynamic link library DLL files. An attacker could trigger this flaw by convincing a victim to load a malicious DLL file...

PT-2015-1553

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1 Office Compatibility Pack version SP3 Description The issue is caused by a buffer overflow in dynamic memory, allowing remote attackers to execute arbitrary code or cause a...

PT-2015-1534

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2013 SP1 Office for Mac version 2011 Excel Viewer version 2007 SP3 Office Compatibility Pack version SP3 Excel Services on SharePoint Server versions 2007 SP3 through 2013 SP1 Description The issue is...

PT-2015-5734

Name of the Vulnerable Software and Affected Versions Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP2 Microsoft Excel Viewer 2007 SP3 Microsoft Office Compatibility Pack SP3 Description A remote code execution issue exists due to improper handling of dynamic link library DLL files by Microsoft...

Microsoft Excel CVE-2015-2375 ASLR Security Bypass Vulnerability

Description Microsoft Excel is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Microsoft Excel 2010 SP2 32-bit editions...

CVE-2015-2415: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-2377: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-2376: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allo...

PT-2015-1535

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack version SP3 Microsoft Excel versions 2007 SP3 through 2013 SP1 Office Compatibility Pack version SP3 Description The issue is caused by a buffer overflow in dynamic memory, allowing a remote attacker to...

MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint Server, or Microsoft Office Compatibility Pack installed that is affected by multiple vulnerabilities : - An ASLR bypass vulnerability exists in Microsoft Excel due to memo...

Microsoft Excel DLL Loading CVE-2015-2378 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Excel...