9.3

CVE-2015-2558

Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a long fileVersion element in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Excel Version2007 Updatesp3
Microsoft ≫ Excel Version2010 Updatesp2 HwPlatformx64
Microsoft ≫ Excel Version2010 Updatesp2 HwPlatformx86
Microsoft ≫ Excel Version2013 Updatesp1
Microsoft ≫ Excel Version2013 Updatesp1 SwEditionrt
Microsoft ≫ Excel Version2016
Microsoft ≫ Excel For Mac Version2011
Microsoft ≫ Excel For Mac Version2016
Microsoft ≫ Office Sharepoint Server Version2007 Updatesp3 Editionx32
Microsoft ≫ Office Sharepoint Server Version2007 Updatesp3 Editionx64
Microsoft ≫ Sharepoint Server Version2010 Updatesp2
Microsoft ≫ Sharepoint Server Version2013 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 48.81% 0.977
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://www.securitytracker.com/id/1033803
Third Party Advisory
VDB Entry