9.3

CVE-2015-0086

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, and Web Apps Server 2013 Gold and SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Version2010 Updatesp2 HwPlatformx64
Microsoft ≫ Office Version2010 Updatesp2 HwPlatformx86
Microsoft ≫ Office Web Apps Server Version2013 SwEditiongold
Microsoft ≫ Office Web Apps Server Version2013 Updatesp1
Microsoft ≫ Sharepoint Server Version2010 Updatesp2
Microsoft ≫ Sharepoint Server Version2013 Update- Edition- SwEditiongold
Microsoft ≫ Sharepoint Server Version2013 Updatesp1
Microsoft ≫ Web Applications Version2010 Updatesp2
Microsoft ≫ Word Version2007 Updatesp3
Microsoft ≫ Word Version2010 Updatesp2
Microsoft ≫ Word Version2013 SwEditionrt_gold
Microsoft ≫ Word Version2013 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.38% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C