CVE-2015-6094

Microsoft Excel Remote Code Execution via Crafted Office Document

Title source: llm
STIX 2.1

Description

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034122
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-15-546
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034118
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/77490

Scores

EPSS 0.2057
EPSS Percentile 97.2%

Details

CWE
CWE-119
Status published
Products (6)
microsoft/excel 2010 sp2 (2 CPE variants)
microsoft/excel 2013 sp1 (2 CPE variants)
microsoft/excel 2016
microsoft/excel_for_mac 2011
microsoft/excel_for_mac 2016
microsoft/sharepoint_server 2013 sp1
Published Nov 11, 2015
Tracked Since Feb 18, 2026