CVE-2015-2376

Microsoft Excel - Memory Corruption

Title source: rule
STIX 2.1

Description

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032899

Scores

EPSS 0.1575
EPSS Percentile 96.5%

Details

CWE
CWE-119
Status published
Products (9)
microsoft/excel 2007 sp3
microsoft/excel 2010 sp2 (2 CPE variants)
microsoft/excel 2013 sp1 (2 CPE variants)
microsoft/excel_viewer 2007 sp3
microsoft/office 2011
microsoft/office_compatibility_pack
microsoft/sharepoint_designer 2007 sp3
microsoft/sharepoint_designer 2010 sp2
microsoft/sharepoint_designer 2013 sp1
Published Jul 14, 2015
Tracked Since Feb 18, 2026