CVE-2015-0064

2015-02-1103:01:07

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.952

Percentile

99.4%

JSON

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Office Remote Code Execution Vulnerability.”

Affected configurations

Nvd

Node

microsoftweb_applicationsMatch2010sp2

Node

microsoftoffice_compatibility_packsp3

Node

microsoftword_automation_servicesMatch-

Node

microsoftwordMatch2007sp3

microsoftwordMatch2010sp2

microsoftword_viewer

Node

microsoftofficeMatch2010sp2x64

microsoftofficeMatch2010sp2x86

Node

microsoftsharepoint_serverMatch2010

VendorProductVersionCPE
microsoftweb_applications2010cpe:2.3:a:microsoft:web_applications:2010:sp2:*:*:*:*:*:*
microsoftoffice_compatibility_pack*cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
microsoftword_automation_services-cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
microsoftword2010cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
microsoftword_viewer*cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:*
microsoftsharepoint_server2010cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	web_applications	2010	cpe:2.3:a:microsoft:web_applications:2010:sp2::::::
microsoft	office_compatibility_pack	*	cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*
microsoft	word_automation_services	-	cpe:2.3:a:microsoft:word_automation_services:-:::::::*
microsoft	word	2007	cpe:2.3:a:microsoft:word:2007:sp3::::::
microsoft	word	2010	cpe:2.3:a:microsoft:word:2010:sp2::::::
microsoft	word_viewer	*	cpe:2.3:a:microsoft:word_viewer::::::::
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2:x64:::::*
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2:x86:::::*
microsoft	sharepoint_server	2010	cpe:2.3:a:microsoft:sharepoint_server:2010:::::::*