CVE-2015-2424

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 40,4%

Kerentanan Out-of-bounds Write pada microsoft excel viewer, microsoft office +4 lainnya. Skor CVSS 3.1 8.8 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Rincian

Terbit di NVD

14 Juli 2015

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

40,4% peluang dieksploitasi; lebih tinggi dari 98,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft PowerPoint Memory Corruption Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070 patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2424 pemerintah AS
• http://www.securitytracker.com/id/1032899 broken link · advisory pihak ketiga · vdb entry