Vulnerability Details CVE-2015-0063
Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Excel Remote Code Execution Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.341
EPSS Ranking 96.8%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/62808
- http://www.securityfocus.com/bid/72460
- http://www.securitytracker.com/id/1031720
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100439
- http://secunia.com/advisories/62808
- http://www.securityfocus.com/bid/72460
- http://www.securitytracker.com/id/1031720
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100439
Products affected by CVE-2015-0063
-
cpe:2.3:a:microsoft:excel:2007
-
cpe:2.3:a:microsoft:excel:2010
-
cpe:2.3:a:microsoft:excel:2013
-
cpe:2.3:a:microsoft:excel_viewer:-
-
cpe:2.3:a:microsoft:excel_viewer:2003
-
cpe:2.3:a:microsoft:excel_viewer:2007
-
cpe:2.3:a:microsoft:office:2010
-
cpe:2.3:a:microsoft:office_compatibility_pack:-