Lucene search

K
cve[email protected]CVE-2015-6177
HistoryDec 09, 2015 - 11:59 a.m.

CVE-2015-6177

2015-12-0911:59:58
CWE-119
web.nvd.nist.gov
35
cve-2015-6177
microsoft excel
office compatibility pack
excel viewer
remote code execution
memory corruption
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.236 Low

EPSS

Percentile

96.6%

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftexcelMatch2007sp3
OR
microsoftexcel_viewer
OR
microsoftoffice_compatibility_packsp3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.236 Low

EPSS

Percentile

96.6%