9.3

CVE-2015-2558

Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a long fileVersion element in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Excel Version 2007 Update sp3
Microsoft ≫ Excel Version 2010 Update sp2 HwPlatform x64
Microsoft ≫ Excel Version 2010 Update sp2 HwPlatform x86
Microsoft ≫ Excel Version 2013 Update sp1
Microsoft ≫ Excel Version 2013 Update sp1 SwEdition rt
Microsoft ≫ Excel Version 2016
Microsoft ≫ Excel For Mac Version 2011
Microsoft ≫ Excel For Mac Version 2016
Microsoft ≫ Office Sharepoint Server Version 2007 Update sp3 Edition x32
Microsoft ≫ Office Sharepoint Server Version 2007 Update sp3 Edition x64
Microsoft ≫ Sharepoint Server Version 2010 Update sp2
Microsoft ≫ Sharepoint Server Version 2013 Update sp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 20.15% 0.972
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1033803
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110
http://www.zerodayinitiative.com/advisories/ZDI-15-516
Third Party Advisory
VDB Entry