CVE-2015-2375

medium · 4.3

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR Bypass Vulnerability."

4.3

CVSS

14.0%

EPSS (exploit prob.)

96th

EPSS percentile

2015-07-14

Published

AV:N/AC:M/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
microsoft	excel	2010
microsoft	excel	2010
microsoft	excel	2013
microsoft	excel	2013
microsoft	sharepoint_server	2010
microsoft	sharepoint_server	2013
microsoft	excel_viewer	2007

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1032899
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070
http://www.securitytracker.com/id/1032899
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-2375