CVE-2015-2415: Buffer Overflow
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2415?
CVE-2015-2415 has a severity rating of important as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2015-2415?
To fix CVE-2015-2415, users should apply the Microsoft security updates provided by the vendor for affected versions of Excel and the Office Compatibility Pack.
Which software is affected by CVE-2015-2415?
CVE-2015-2415 affects Microsoft Excel 2007 SP3, 2010 SP2, 2013 SP1, and Office Compatibility Pack SP3.
What type of vulnerability is CVE-2015-2415?
CVE-2015-2415 is classified as a memory corruption vulnerability that may lead to arbitrary code execution.
Can CVE-2015-2415 be exploited without user interaction?
Yes, CVE-2015-2415 can be exploited by opening a crafted Office document, which does not require specific user actions beyond opening the file.