CVEvulnerability

CVE-2015-2375

4.3 MEDIUM Published 2015-07-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR Bypass Vulnerability."

Affected configurations

• microsoft excel 2010 • microsoft excel 2013 • microsoft sharepoint server 2010 • microsoft sharepoint server 2013 • microsoft excel viewer 2007

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References