9.3

CVE-2015-2555

EPSS 20.15%
Veröffentlicht 14.10.2015 01:59:10
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Use-after-free vulnerability in Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted calculatedColumnFormula object in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Excel Version 2010 Update sp2 HwPlatform x64

Microsoft ≫ Excel Version 2010 Update sp2 HwPlatform x86

Microsoft ≫ Excel Version 2013 Update sp1

Microsoft ≫ Excel Version 2013 Update sp1 SwEdition rt

Microsoft ≫ Excel For Mac Version 2011

Microsoft ≫ Excel For Mac Version 2016

Microsoft ≫ Sharepoint Server Version 2010 Update sp2

Microsoft ≫ Sharepoint Server Version 2013 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	20.15%	0.972

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securitytracker.com/id/1033803

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-15-517

Third Party Advisory

VDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110

https://nvd.nist.gov/vuln/detail/CVE-2015-2555

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2555

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2555

EUVD