CVE-2015-6093CWE-119

CVE-2015-6093

High · published November 11, 2015

CVSS v2.0
9.3
EPSS
21%
Percentile
97.5
In the wild
Unconfirmed
What it is

🔍 A crafted Office document is all it takes for this memory corruption vulnerability to unleash chaos! Think of it like a restaurant where a diner orders a special dish, but the chef misreads the recipe and adds a surprise ingredient that no one asked for—disastrous for the meal and potentially harmful! 🍽️ An attacker could trick your system into executing malicious code, leading to unauthorized access or data manipulation! It's like someone sneaking into your kitchen and altering your best recipes—absolutely devastating!

Put simply

Think of it like a restaurant where a diner orders a special dish, but the chef misreads the recipe and adds a surprise ingredient that no one asked for—disastrous for the meal and potentially harmful! 🍽️ This CVE allows remote attackers to exploit a memory corruption issue in various Microsoft Office versions, resulting in arbitrary code execution through maliciously crafted documents.

What to do

An attacker could trick your system into executing malicious code, leading to unauthorized access or data manipulation! It's like someone sneaking into your kitchen and altering your best recipes—absolutely devastating! To safeguard your systems, ensure you apply the latest security updates from Microsoft for affected Office versions. Regularly audit your document handling policies, and educate users about the risks of opening suspicious files. 🛡️ You've got this! Stay vigilant, keep your software updated, and protect your digital kitchen! 🔒

The record
Technical detail
CVSS v2.0
9.3 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.20969 · 97.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2015-11-11T17:59Z
Affected products (8)
ProductVersionsFixed in
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_web_appsall versions—
microsoft/office_web_apps_serverall versions—
microsoft/sharepoint_serverall versions—
microsoft/sharepoint_serverall versions—
References (10)
EPSS history
Timeline
  • 11 NOV 11:00Z
    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013…
    cvelistv5