CVE-2015-0063

Опубликовано: 11 фев. 2015

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Excel Remote Code Execution Vulnerability."

Ссылки

http://secunia.com/advisories/62808
Vendor Advisory
http://www.securityfocus.com/bid/72460
VDB Entry
Vendor Advisory
http://www.securitytracker.com/id/1031720
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100439
VDB Entry
http://secunia.com/advisories/62808
Vendor Advisory
http://www.securityfocus.com/bid/72460
VDB Entry
Vendor Advisory
http://www.securitytracker.com/id/1031720
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100439
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x64:*

cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x86:*

cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2013:sp3:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*

cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*

EPSS

Процентиль: 97%

0.3411

Средний

9.3 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-p82h-pr5c-g96w

github

больше 3 лет назад