Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-2375
HistoryJul 14, 2015 - 9:59 p.m.

CVE-2015-2375

2015-07-1421:59:10
CWE-200
[email protected]
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.529 Medium

EPSS

Percentile

97.6%

JSON

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka “Microsoft Excel ASLR Bypass Vulnerability.”

Affected configurations

NVD
Node
microsoftexcelMatch2010sp2x64
OR
microsoftexcelMatch2010sp2x86
OR
microsoftexcelMatch2013sp1
OR
microsoftexcelMatch2013sp1rt
Node
microsoftsharepoint_serverMatch2010sp2
OR
microsoftsharepoint_serverMatch2013sp1
Node
microsoftexcel_viewerMatch2007sp3

Related

cve 1
checkpoint_advisories 1
symantec 1
cvelist 1
prion 1
zdi 1
openvas 2
nessus 1
securityvulns 1
kaspersky 1
threatpost 1
cve
cve
CVE-2015-2375
2015-07-14 21:59:10
checkpoint_advisories
checkpoint_advisories
Microsoft Excel ASLR Bypass (MS15-070; CVE-2015-2375)
2015-07-14 00:00:00
symantec
symantec
Microsoft Excel CVE-2015-2375 ASLR Security Bypass Vulnerability
2015-07-14 00:00:00
cvelist
cvelist
CVE-2015-2375
2015-07-14 21:00:00
prion
prion
Security feature bypass
2015-07-14 21:59:00
zdi
zdi
Microsoft Office Excel table Tag Use-After-Free Information Disclosure Vulnerability
2015-07-14 00:00:00
openvas
openvas
Microsoft SharePoint Server Excel Services Multiple Vulnerabilities (3072620)
2015-07-15 00:00:00
Microsoft Office Excel Multiple Remote Code Execution Vulnerabilities (3072620)
2015-07-15 00:00:00
nessus
nessus
MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
2015-07-14 00:00:00
securityvulns
securityvulns
Microsoft Office multiple security vulnerabilities
2015-07-19 00:00:00
kaspersky
kaspersky
KLA10632 Multiple vulnerabilities in Microsoft Office
2015-07-14 00:00:00
threatpost
threatpost
Sofacy APT28 Gang Using New Backdoors, Zero Days
2015-12-04 07:05:37

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.529 Medium

EPSS

Percentile

97.6%

JSON
Related for NVD:CVE-2015-2375
cve1checkpoint_advisories1symantec1cvelist1prion1zdi1openvas2nessus1securityvulns1kaspersky1threatpost1