CVE-2015-6094: Buffer Overflow

Published Nov 11, 2015

Updated

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel for Mac=2011

Microsoft Excel for Mac=2016

Microsoft SharePoint Server=2013-sp1

Event History

Nov 11, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6094?

CVE-2015-6094 has a high severity rating as it allows remote attackers to execute arbitrary code.

How do I fix CVE-2015-6094?

To mitigate CVE-2015-6094, users should apply the latest security updates provided by Microsoft for affected versions of Excel and SharePoint Server.

What versions of Microsoft Excel are affected by CVE-2015-6094?

CVE-2015-6094 affects Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2016, and Excel for Mac 2011 and 2016.

Can CVE-2015-6094 impact SharePoint Server?

Yes, CVE-2015-6094 can impact SharePoint Server 2013 SP1, allowing exploitation via crafted Office documents.

What type of vulnerability is CVE-2015-6094?

CVE-2015-6094 is classified as a memory corruption vulnerability in Microsoft Office products.