CVE-2015-2377: Buffer Overflow
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2377?
CVE-2015-2377 has a severity rating of critical as it allows remote code execution and memory corruption.
How do I fix CVE-2015-2377?
To fix CVE-2015-2377, users should apply the security updates provided by Microsoft for affected versions of Excel and the Office Compatibility Pack.
Which software is affected by CVE-2015-2377?
CVE-2015-2377 affects Microsoft Excel 2007 SP3, 2010 SP2, 2013 SP1, and the Office Compatibility Pack SP3.
What type of attack does CVE-2015-2377 facilitate?
CVE-2015-2377 facilitates remote attacks that can execute arbitrary code or lead to denial of service through crafted Office documents.
Is there a known exploit for CVE-2015-2377?
Yes, CVE-2015-2377 is known to be exploited in the wild, making it imperative for users to update their software promptly.