CVE-2015-0063 Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitra...
HighCVSS 9.3
EPSS 16.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Excel Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft excel viewer | All versions | No fix listed |
| Microsoft excel | = 2007-sp3 | No fix listed |
| Microsoft excel | = 2010-sp2 | No fix listed |
| Microsoft excel | = 2013 | No fix listed |
| Microsoft excel | = 2013-sp3 | No fix listed |
| Microsoft office | = 2010-sp2 | No fix listed |
References
- 62808 third-party-advisory vendor-advisory
- 72460 vdb-entry vendor-advisory
- 1031720 third-party-advisory vdb-entry
- MS15-012 patch vendor-advisory
- ms-excel-cve20150063-code-exec(100439) vdb-entry