Aller au contenu
Appaloosa Scout
HIGH 8.8 KEV

CVE-2015-2424

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

CVSS v3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

Ajouté au KEV
2022-03-03
Deadline remédiation
2022-03-24
Action requise
Apply updates per vendor instructions.
Ransomware
Non

Apps mobiles affectées

Microsoft PowerPoint
Android
com.microsoft.office.powerpoint
1 CVE 1 KEV
Microsoft PowerPoint
iOS
com.microsoft.Office.PowerPoint
1 CVE 1 KEV
Microsoft Word
iOS
com.microsoft.Office.Word
1 CVE 1 KEV
Microsoft Word: Edit Documents
Android
com.microsoft.office.word
1 CVE 1 KEV

Configurations CPE vulnérables

Vendor Produit Plateforme Versions CPE 2.3 URI
microsoft powerpoint Android — cpe:2.3:a:microsoft:powerpoint:2007:sp3:*:*:*:*:*:*
microsoft powerpoint iOS — cpe:2.3:a:microsoft:powerpoint:2007:sp3:*:*:*:*:*:*
microsoft powerpoint Android — cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
microsoft powerpoint iOS — cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
microsoft word Android — cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
microsoft word iOS — cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
Voir sur NVD ↗ Catalogue CISA KEV ↗