Lucene search

K
cve[email protected]CVE-2015-2424
HistoryJul 14, 2015 - 9:59 p.m.

CVE-2015-2424

2015-07-1421:59:35
CWE-119
web.nvd.nist.gov
870
In Wild
cve-2015-2424
microsoft
powerpoint
word
2007
2010
2013
sp3
sp2
sp1
memory corruption
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.3 High

AI Score

Confidence

High

0.671 Medium

EPSS

Percentile

98.0%

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp2x64
OR
microsoftwordMatch2010sp2x86
OR
microsoftwordMatch2013sp1
Node
microsoftpowerpointMatch2007sp3
OR
microsoftpowerpointMatch2010sp2
OR
microsoftpowerpointMatch2013sp1
OR
microsoftpowerpointMatch2013sp1rt

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.3 High

AI Score

Confidence

High

0.671 Medium

EPSS

Percentile

98.0%