ID CVE-2015-1770
Summary Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
    cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
  • cpe:2.3:a:microsoft:office:2013:sp1:*:*:-:*:*:*
    cpe:2.3:a:microsoft:office:2013:sp1:*:*:-:*:*:*
CVSS
Base: 9.3 (as of 09-07-2024 - 18:27)
Impact:
Exploitability:
CWE CWE-824
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
msbulletin via4
bulletin_id MS15-059
bulletin_url
date 2015-06-09T00:00:00
impact Remote Code Execution
knowledgebase_id 3064949
knowledgebase_url
severity Important
title Vulnerabilities in Microsoft Office Could Allow Remote Code Execution
refmap via4
bid 75016
sectrack 1032523
Last major update 09-07-2024 - 18:27
Published 10-06-2015 - 01:59
Last modified 09-07-2024 - 18:27
Back to Top