CVE-2015-0063

Microsoft Office Compatibility Pack - Remote Code Execution via Crafted Office Document

Title source: llm
STIX 2.1

Description

Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Excel Remote Code Execution Vulnerability."

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62808
Patch, Vendor Advisory vendor-advisory x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031720
VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/72460

Scores

EPSS 0.1618
EPSS Percentile 96.6%

Details

CWE
CWE-399
Status published
Products (6)
microsoft/excel 2007 sp3
microsoft/excel 2010 sp2 (2 CPE variants)
microsoft/excel 2013 (2 CPE variants)
microsoft/excel_viewer
microsoft/office 2010 sp2 (2 CPE variants)
microsoft/office_compatibility_pack
Published Feb 11, 2015
Tracked Since Feb 18, 2026