critical9.3Public exploit code
CVE-2015-2521
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Office 2007 - OLESSDirectyEntry.CreateTime Type Confusion2015-09-16 · dos · windows · Verified
Impact
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Excel | Versions 2007, 2010 |
| Microsoft | Excel Viewer | All versions |
| Microsoft | Office Compatibility Pack | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1033488
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099
- https://www.exploit-db.com/exploits/38216/
- http://www.securitytracker.com/id/1033488
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099
- https://www.exploit-db.com/exploits/38216/