CVE-2015-0063

2015-02-1103:01:06

CWE-399

microsoft

web.nvd.nist.gov

cve-2015-0063

microsoft excel

remote code execution

memory corruption

office document

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.167

Percentile

96.1%

JSON

Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Excel Remote Code Execution Vulnerability.”

Affected configurations

Nvd

Node

microsoftoffice_compatibility_packsp3

Node

microsoftexcel_viewer

Node

microsoftexcelMatch2007sp3

microsoftexcelMatch2010sp2x64

microsoftexcelMatch2010sp2x86

microsoftexcelMatch2013

microsoftexcelMatch2013sp3

Node

microsoftofficeMatch2010sp2x64

microsoftofficeMatch2010sp2x86

VendorProductVersionCPE
microsoftoffice_compatibility_pack*cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
microsoftexcel_viewer*cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*
microsoftexcel2007cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
microsoftexcel2010cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x64:*
microsoftexcel2010cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x86:*
microsoftexcel2013cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*
microsoftexcel2013cpe:2.3:a:microsoft:excel:2013:sp3:*:*:*:*:*:*
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_compatibility_pack	*	cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*
microsoft	excel_viewer	*	cpe:2.3:a:microsoft:excel_viewer::::::::
microsoft	excel	2007	cpe:2.3:a:microsoft:excel:2007:sp3::::::
microsoft	excel	2010	cpe:2.3:a:microsoft:excel:2010:sp2:::::x64:*
microsoft	excel	2010	cpe:2.3:a:microsoft:excel:2010:sp2:::::x86:*
microsoft	excel	2013	cpe:2.3:a:microsoft:excel:2013:::::::*
microsoft	excel	2013	cpe:2.3:a:microsoft:excel:2013:sp3::::::
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2:x64:::::*
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2:x86:::::*