CVE-2015-6093
Microsoft Office 2007-2016, SharePoint 2010/2013, Office Web Apps - RCE via Crafted Document
Title source: llmDescription
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/77491
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034122
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-116
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034118
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-15-539
Scores
EPSS
0.2320
EPSS Percentile
97.5%
Details
CWE
CWE-119
Status
published
Products (8)
microsoft/office
2007 sp3
microsoft/office
2010 sp2
microsoft/office
2013 sp1
microsoft/office
2016
microsoft/office_web_apps
2010 sp2
microsoft/office_web_apps_server
2013 sp1
microsoft/sharepoint_server
2010 sp2
microsoft/sharepoint_server
2013 sp1
Published
Nov 11, 2015
Tracked Since
Feb 18, 2026