CVE-2015-6172

EPSS 32.8%
Published 09.12.2015 11:59:53
Last modified 12.04.2025 10:46:40
Source secure@microsoft.com
Teams watchlist Login
Open Login

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted email message processed by Outlook, aka "Microsoft Office RCE Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Office Version2010 Updatesp2 Editionx64

Microsoft ≫ Office Version2010 Updatesp2 Editionx86

Microsoft ≫ Office Compatibility Pack Updatesp3

Microsoft ≫ Word Version2007 Updatesp3

Microsoft ≫ Word Version2010 Updatesp2

Microsoft ≫ Word Version2013 Updatesp1

Microsoft ≫ Word Version2013 Updatesp1 SwEditionrt

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	32.8%	0.967

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-131

http://www.securitytracker.com/id/1034325

https://nvd.nist.gov/vuln/detail/CVE-2015-6172

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-6172

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-6172

EUVD