Lucene search

K
cve[email protected]CVE-2015-6118
HistoryDec 09, 2015 - 11:59 a.m.

CVE-2015-6118

2015-12-0911:59:07
CWE-119
web.nvd.nist.gov
28
cve-2015-6118
microsoft office
remote code execution
memory corruption
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.17 Low

EPSS

Percentile

96.1%

Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftofficeMatch2007sp3
OR
microsoftofficeMatch2010sp2x64
OR
microsoftofficeMatch2010sp2x86

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.17 Low

EPSS

Percentile

96.1%