9.3

CVE-2015-2431

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component Remote Code Execution Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Live Meeting Version2007
Microsoft ≫ Lync Version2010 HwPlatformx64
Microsoft ≫ Lync Version2010 HwPlatformx86
Microsoft ≫ Lync Version2010 SwEditionattendee
Microsoft ≫ Lync Basic Version2013 Updatesp1 HwPlatformx64
Microsoft ≫ Lync Basic Version2013 Updatesp1 HwPlatformx86
Microsoft ≫ Office Version2010 Updatesp2 HwPlatformx64
Microsoft ≫ Office Version2010 Updatesp2 HwPlatformx86
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 62.13% 0.983
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.