CVE-2015-6122

Microsoft Excel and Office Compatibility Pack - Crafted Document Code Execution

Title source: manual
STIX 2.1

Description

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034324

Scores

EPSS 0.1360
EPSS Percentile 96.0%

Details

CWE
CWE-119
Status published
Products (5)
microsoft/excel 2007 sp3
microsoft/excel 2010 sp1 (2 CPE variants)
microsoft/excel_for_mac 2011
microsoft/excel_viewer
microsoft/office_compatibility_pack
Published Dec 09, 2015
Tracked Since Feb 18, 2026