CVE-2015-2523: Buffer Overflow
First published: Wed Sep 09 2015(Updated: )
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office Excel | =2007-sp3 | |
| Microsoft Office Excel | =2010-sp2 | |
| Microsoft Office Excel | =2010-sp2 | |
| Microsoft Excel | =2011 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Excel | =2016 | |
| Microsoft Office Excel Viewer | ||
| Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-2523?
CVE-2015-2523 is classified as a critical vulnerability allowing remote code execution.
How do I fix CVE-2015-2523?
To fix CVE-2015-2523, apply the latest security updates provided by Microsoft for the affected versions of Excel.
What versions of Excel are affected by CVE-2015-2523?
CVE-2015-2523 affects Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel for Mac 2011 and 2016, Excel Viewer, and the Office Compatibility Pack SP3.
What kind of attack does CVE-2015-2523 involve?
CVE-2015-2523 involves remote attackers executing arbitrary code via a crafted Office document.
Can CVE-2015-2523 be exploited without user interaction?
Yes, CVE-2015-2523 can be exploited automatically when a victim opens a malicious Excel document.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft office excel
- version/microsoft office excel/2007-sp3
- version/microsoft office excel/2010-sp2
- canonical/microsoft excel
- version/microsoft excel/2011
- version/microsoft office excel/2013-sp1
- version/microsoft excel/2016
- canonical/microsoft office excel viewer
- canonical/microsoft office compatibility pack for word, excel, and powerpoint
- version/microsoft office compatibility pack for word, excel, and powerpoint/sp3