CVE-2015-2376

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel…

published July 14, 2015

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

⚠️ Just a crafted Office document can let attackers take control! This vulnerability affects multiple versions of Microsoft Excel and SharePoint services, making it surprisingly sneaky. 🛑 Think of this vulnerability like a recipe card with a hidden ingredient that, when added, causes your dish to explode! A seemingly harmless document could trigger memory corruption, leading to chaos in your system. If exploited, an attacker could execute arbitrary code—imagine them sneaking in like a chef altering your famous dish without you knowing! Alternatively, it could cause a denial of service, crashing your Excel or SharePoint services just when you need them most.

Put simply

Think of this vulnerability like a recipe card with a hidden ingredient that, when added, causes your dish to explode! A seemingly harmless document could trigger memory corruption, leading to chaos in your system. This memory corruption vulnerability allows attackers to craft malicious Office documents that, when opened, can execute arbitrary code or disrupt services, like a poorly designed dish leading to kitchen disaster.

What to do

If exploited, an attacker could execute arbitrary code—imagine them sneaking in like a chef altering your famous dish without you knowing! Alternatively, it could cause a denial of service, crashing your Excel or SharePoint services just when you need them most. To protect against this: ensure your Office suite is patched to the latest version, tighten your document permissions, and educate users about the dangers of opening unexpected Office files. Regularly audit your systems to identify any vulnerabilities! You've got this! Stay vigilant, follow these steps, and keep your digital kitchen safe! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15746 · 96.9th percentile
Published
2015-07-14T21:00Z
EPSS history
Timeline
  • 14 JUL 21:00Z
    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel…
    cvelistv5