CVE-2015-1682

high · 9.3

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, PowerPoint Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, SharePoint Foundation 2010 SP2, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

9.3

CVSS

18.7%

EPSS (exploit prob.)

97th

EPSS percentile

2015-05-13

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
microsoft	excel	2010
microsoft	excel	2010
microsoft	excel	2013
microsoft	excel_web_app	2010
microsoft	office	2010
microsoft	office	2010
microsoft	office	2011
microsoft	office	2013
microsoft	office	2013
microsoft	office_web_apps_server	2010
microsoft	office_web_apps_server	2013
microsoft	powerpoint	2010
microsoft	powerpoint	2011
microsoft	powerpoint	2013
microsoft	powerpoint	2013
microsoft	powerpoint_viewer	all versions
microsoft	sharepoint_foundation	2010
microsoft	sharepoint_foundation	2013
microsoft	sharepoint_server	2010
microsoft	sharepoint_server	2013
microsoft	word	2010
microsoft	word	2011
microsoft	word	2013
microsoft	word	2013

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-1682