9.3 - MS15-070

Executive Summary

Summary
Title	Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)

Informations
Name	MS15-070	First vendor Publication	2015-07-14
Vendor	Microsoft	Last vendor Modification	2015-07-14
Severity (Vendor)	Important	Revision	1.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Severity Rating: Important
Revision Note: V1.0 (July 14, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Original Source

Url : https://technet.microsoft.com/en-us/library/security/MS15-070

CWE : Common Weakness Enumeration

%	Id	Name
86 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
14 %	CWE-200	Information Exposure

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:28544

Oval ID:	oval:org.mitre.oval:def:28544
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2415 (MS15-070)
Description:	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2415	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Excel 2007 Microsoft Excel 2010 Microsoft Excel 2013 Microsoft Office Compatibility Pack
Definition Synopsis:
Excel 2007 and vulnerable file version Microsoft Excel 2007 is installed AND Check if the version of excel.exe is less than 12.0.6723.5000 OR Excel 2010 and vulnerable file version Microsoft Excel 2010 is installed AND Check if the version of excel.exe is less than 14.0.7153.5000 OR Excel 2013 and vulnerable file version Microsoft Excel 2013 is installed AND Check if the version of excel.exe is less than 15.0.4737.1000 OR Office Compatibility Pack 2007 and vulnerable version Microsoft Office Compatibility Pack is installed AND Check if the version of excelcnv.exe is less than 12.0.6723.5000

Definition Id: oval:org.mitre.oval:def:28805

Oval ID:	oval:org.mitre.oval:def:28805
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2377 (MS15-070)
Description:	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2377	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Excel 2007 Microsoft Excel 2010 Microsoft Excel 2013 Microsoft Office Compatibility Pack
Definition Synopsis:
Excel 2007 and vulnerable file version Microsoft Excel 2007 is installed AND Check if the version of excel.exe is less than 12.0.6723.5000 OR Excel 2010 and vulnerable file version Microsoft Excel 2010 is installed AND Check if the version of excel.exe is less than 14.0.7153.5000 OR Excel 2013 and vulnerable file version Microsoft Excel 2013 is installed AND Check if the version of excel.exe is less than 15.0.4737.1000 OR Office Compatibility Pack 2007 and vulnerable version Microsoft Office Compatibility Pack is installed AND Check if the version of excelcnv.exe is less than 12.0.6723.5000

Definition Id: oval:org.mitre.oval:def:28959

Oval ID:	oval:org.mitre.oval:def:28959
Title:	Microsoft Office memory corruption vulnerability – CVE-2015-2376 (MS15-070) (Mac OS X)
Description:	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2015-2376	Version:	3
Platform(s):	Apple Mac OS X Apple Mac OS X Server	Product(s):	Microsoft Office 2011 for Mac
Definition Synopsis:
Microsoft Office 2011 for Mac is installed AND Check if the version of Office 2011 for Mac is less than 14.5.3

Definition Id: oval:org.mitre.oval:def:29094

Oval ID:	oval:org.mitre.oval:def:29094
Title:	Microsoft Office memory corruption vulnerability – CVE-2015-2379 (MS15-070) (Mac OS X)
Description:	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2015-2379	Version:	3
Platform(s):	Apple Mac OS X Apple Mac OS X Server	Product(s):	Microsoft Office 2011 for Mac
Definition Synopsis:
Microsoft Office 2011 for Mac is installed AND Check if the version of Office 2011 for Mac is less than 14.5.3

Definition Id: oval:org.mitre.oval:def:29139

Oval ID:	oval:org.mitre.oval:def:29139
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2375 (MS15-070)
Description:	Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR Bypass Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2375	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Excel 2010 Microsoft Excel 2013 Microsoft SharePoint Server 2010 Microsoft SharePoint Server 2013
Definition Synopsis:
Excel 2010 and vulnerable file version Microsoft Excel 2010 is installed AND Check if the version of excel.exe is less than 14.0.7153.5000 OR Excel 2013 and vulnerable file version Microsoft Excel 2013 is installed AND Check if the version of excel.exe is less than 15.0.4737.1000 OR Sharepoint Server 2010 and vulnerable file version Microsoft Office SharePoint Server 2010 is installed. AND Check if the version of xlsrv.dll is less than 14.0.7153.5000 OR Sharepoint Server 2013 and vulnerable file version Microsoft SharePoint Server 2013 is installed AND Check if the version of xlsrv.dll is less than 15.0.4737.1000

Definition Id: oval:org.mitre.oval:def:29245

Oval ID:	oval:org.mitre.oval:def:29245
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2376 (MS15-070)
Description:	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2376	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Excel 2007 Microsoft Excel 2010 Microsoft Excel 2013 Microsoft Excel Viewer 2007 Microsoft Office Compatibility Pack Microsoft SharePoint Server 2007 Microsoft SharePoint Server 2010 Microsoft SharePoint Server 2013
Definition Synopsis:
Excel 2007 and vulnerable file version Microsoft Excel 2007 is installed AND Check if the version of excel.exe is less than 12.0.6723.5000 OR Excel 2010 and vulnerable file version Microsoft Excel 2010 is installed AND Check if the version of excel.exe is less than 14.0.7153.5000 OR Excel 2013 and vulnerable file version Microsoft Excel 2013 is installed AND Check if the version of excel.exe is less than 15.0.4737.1000 OR Excel Viewer and vulnerable file version Microsoft Excel Viewer 2007 is installed AND Check if the version of xlview.exe is less than 12.0.6723.5000 OR Office Compatibility Pack 2007 and vulnerable version Microsoft Office Compatibility Pack is installed AND Check if the version of excelcnv.exe is less than 12.0.6723.5000 OR Sharepoint Server 2010 and vulnerable file version Microsoft Office SharePoint Server 2010 is installed. AND Check if the version of xlsrv.dll is less than 14.0.7153.5000 OR Sharepoint Server 2013 and vulnerable file version Microsoft SharePoint Server 2013 is installed AND Check if the version of xlsrv.dll is less than 15.0.4737.1000 OR Sharepoint Server 2007 and vulnerable file version Microsoft Office SharePoint Server 2007 is installed. AND Check if the version of xlsrv.dll is less than 12.0.6723.5000

Definition Id: oval:org.mitre.oval:def:29284

Oval ID:	oval:org.mitre.oval:def:29284
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2379 (MS15-070)
Description:	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2379	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Word Viewer Microsoft Word 2007 Microsoft Word 2010 Microsoft Word 2013
Definition Synopsis:
Word 2007 and vulnerable file version Microsoft Word 2007 is installed AND Check if the version of winword.exe is less than 12.0.6726.5000 OR Word 2010 and vulnerable file version Microsoft Word 2010 is installed AND Check if the version of winword.exe is less than 14.0.7153.5002 OR Word 2013 and vulnerable file version Microsoft Word 2013 is installed AND Check if the version of winword.exe is less than 15.0.4737.1003 OR Word Viewer and vulnerable file version Microsoft Word Viewer is installed AND Check if the version of wordview.exe is less than 11.0.8419

Definition Id: oval:org.mitre.oval:def:29449

Oval ID:	oval:org.mitre.oval:def:29449
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2380 (MS15-070)
Description:	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2380	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Word Viewer Microsoft Word 2007 Microsoft Word 2010 Microsoft Word 2013
Definition Synopsis:
Word 2007 and vulnerable file version Microsoft Word 2007 is installed AND Check if the version of winword.exe is less than 12.0.6726.5000 OR Word 2010 and vulnerable file version Microsoft Word 2010 is installed AND Check if the version of winword.exe is less than 14.0.7153.5002 OR Word 2013 and vulnerable file version Microsoft Word 2013 is installed AND Check if the version of winword.exe is less than 15.0.4737.1003 OR Word Viewer and vulnerable file version Microsoft Word Viewer is installed AND Check if the version of wordview.exe is less than 11.0.8419

Definition Id: oval:org.mitre.oval:def:29517

Oval ID:	oval:org.mitre.oval:def:29517
Title:	Microsoft Office memory corruption vulnerability - CVE-2015-2424 (MS15-070)
Description:	Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2424	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft PowerPoint 2007 Microsoft PowerPoint 2010 Microsoft PowerPoint 2013 Microsoft Word 2007 Microsoft Word 2010 Microsoft Word 2013
Definition Synopsis:
Powerpoint 2007 and vulnerable file version Microsoft PowerPoint 2007 is installed AND Check if the version of ppcore.dll is less than 12.0.6726.5000 OR Powerpoint 2010 and vulnerable file version Microsoft PowerPoint 2010 is installed AND Check if the version of ppcore.dll is less than 14.0.7153.5002 OR Powerpoint 2013 and vulnerable file version Microsoft PowerPoint 2013 is installed AND Check if the version ppcore.dll is less than 15.0.4737.1003 OR Word 2007 and vulnerable file version Microsoft Word 2007 is installed AND Check if the version of winword.exe is less than 12.0.6726.5000 OR Word 2010 and vulnerable file version Microsoft Word 2010 is installed AND Check if the version of winword.exe is less than 14.0.7153.5002 OR Word 2013 and vulnerable file version Microsoft Word 2013 is installed AND Check if the version of winword.exe is less than 15.0.4737.1003

Definition Id: oval:org.mitre.oval:def:29525

Oval ID:	oval:org.mitre.oval:def:29525
Title:	Microsoft Excel DLL remote code execution vulnerability - CVE-2015-2378 (MS15-070)
Description:	Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Microsoft Excel DLL Remote Code Execution Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2015-2378	Version:	3
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Microsoft Excel 2007 Microsoft Excel 2010 Microsoft Excel Viewer 2007 Microsoft Office Compatibility Pack
Definition Synopsis:
Excel 2007 and vulnerable file version Microsoft Excel 2007 is installed AND Check if the version of excel.exe is less than 12.0.6723.5000 OR Excel 2010 and vulnerable file version Microsoft Excel 2010 is installed AND Check if the version of excel.exe is less than 14.0.7153.5000 OR Excel Viewer and vulnerable file version Microsoft Excel Viewer 2007 is installed AND Check if the version of xlview.exe is less than 12.0.6723.5000 OR Office Compatibility Pack 2007 and vulnerable version Microsoft Office Compatibility Pack is installed AND Check if the version of excelcnv.exe is less than 12.0.6723.5000

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Excel cpe:2.3:a:microsoft:excel:2013:sp1:::rt:::* cpe:2.3:a:microsoft:excel:2013:sp1:::::: cpe:2.3:a:microsoft:excel:2010:sp2:::::x86:* cpe:2.3:a:microsoft:excel:2010:sp2::::x86::* cpe:2.3:a:microsoft:excel:2010:sp2:::::x64:* cpe:2.3:a:microsoft:excel:2007:sp3::::::	6
Application	Microsoft Excel Viewer cpe:2.3:a:microsoft:excel_viewer:2007:sp3::::::	1
Application	Microsoft Office cpe:2.3:a:microsoft:office:2011:::::mac:: cpe:2.3:a:microsoft:office:2010:sp2:::::x64:* cpe:2.3:a:microsoft:office:2010:sp2:::::x86:*	3
Application	Microsoft Office Compatibility Pack cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*	1
Application	Microsoft Powerpoint cpe:2.3:a:microsoft:powerpoint:2013:sp1:::rt:::* cpe:2.3:a:microsoft:powerpoint:2013:sp1:::::: cpe:2.3:a:microsoft:powerpoint:2010:sp2:::::: cpe:2.3:a:microsoft:powerpoint:2007:sp3::::::	4
Application	Microsoft Sharepoint Designer cpe:2.3:a:microsoft:sharepoint_designer:2013:sp1:::::: cpe:2.3:a:microsoft:sharepoint_designer:2010:sp2:::::: cpe:2.3:a:microsoft:sharepoint_designer:2007:sp3::::::	3
Application	Microsoft Sharepoint Server cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:::::: cpe:2.3:a:microsoft:sharepoint_server:2010:sp2::::::	2
Application	Microsoft Word cpe:2.3:a:microsoft:word:2013:sp1:::::: cpe:2.3:a:microsoft:word:2013:sp1:::rt:::* cpe:2.3:a:microsoft:word:2010:sp2:::::x64:* cpe:2.3:a:microsoft:word:2010:sp2::::x86::* cpe:2.3:a:microsoft:word:2007:sp3::::::	5
Application	Microsoft Word Viewer cpe:2.3:a:microsoft:word_viewer::::::::	1

Information Assurance Vulnerability Management (IAVM)

Date	Description
2015-07-16	IAVM : 2015-A-0163 - Multiple Vulnerabilities in Microsoft Office (MS15-070) Severity : Category II - VMSKEY : V0061121

Snort® IPS/IDS

Date	Description
2015-08-20	Microsoft Office Word RTF Control.TaskSymbol.1 heap corruption attempt - Win.... RuleID : 35326 - Revision : 3 - Type : FILE-OFFICE
2015-08-20	Microsoft Office Word RTF Control.TaskSymbol.1 heap corruption attempt - Win.... RuleID : 35325 - Revision : 4 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Word OCX use after free attempt RuleID : 35202 - Revision : 2 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Word OCX use after free attempt RuleID : 35201 - Revision : 2 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Word sprmPItap heap corruption attempt RuleID : 35191 - Revision : 3 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Word sprmPItap heap corruption attempt RuleID : 35190 - Revision : 3 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel c legend remote code execution attempt RuleID : 35177 - Revision : 3 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel c legend remote code execution attempt RuleID : 35176 - Revision : 3 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel Viewer request for msostyle.dll over SMB attempt RuleID : 35144 - Revision : 4 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel Viewer msostyle.dll dll-load exploit attempt RuleID : 35143 - Revision : 4 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel malformed workbook record remote code execution attempt RuleID : 35142 - Revision : 4 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel malformed workbook record remote code execution attempt RuleID : 35141 - Revision : 4 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel out of bounds memory access attempt RuleID : 35138 - Revision : 2 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel out of bounds memory access attempt RuleID : 35137 - Revision : 3 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel invalid table information disclosure attempt RuleID : 35130 - Revision : 3 - Type : FILE-OFFICE
2015-08-14	Microsoft Office Excel invalid table information disclosure attempt RuleID : 35129 - Revision : 3 - Type : FILE-OFFICE

Nessus® Vulnerability Scanner

Date	Description
2015-07-14	Name : An application installed on the remote Mac OS X host is affected by multiple ... File : macosx_ms15-070_office_2011.nasl - Type : ACT_GATHER_INFO
2015-07-14	Name : The remote Windows host is affected by multiple vulnerabilities. File : smb_nt_ms15-070.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2015-10-18 17:26:37	Multiple Updates
2015-08-20 21:27:35	Multiple Updates
2015-08-14 21:23:54	Multiple Updates
2015-07-18 13:29:47	Multiple Updates
2015-07-15 21:27:47	Multiple Updates
2015-07-15 05:31:36	Multiple Updates
2015-07-14 21:30:40	Multiple Updates
2015-07-14 21:17:20	First insertion

Global Informations

Type	Count
CWE ID(s)	7
Oval ID(s)	10
CPE ID(s)	26
IAVM(s)	1
Snort® Rule(s)	16
Nessus® Exploit(s)	2

	Related
10	MS15-067
10	MS15-034
10	MS15-002
9.3	MS15-134
9.3	MS15-131
9.3	MS15-130
9.3	MS15-129
9.3	MS15-128
9.3	MS15-127
9.3	MS15-126
9.3	MS15-125
9.3	MS15-124
9.3	MS15-116
9.3	MS15-115
9.3	MS15-114
9.3	MS15-113
9.3	MS15-112
9.3	MS15-110
9.3	MS15-109
9.3	MS15-108
9.3	MS15-106
9.3	MS15-101
9.3	MS15-100
9.3	MS15-099
9.3	MS15-098
9.3	MS15-097
9.3	MS15-095
9.3	MS15-094
9.3	MS15-093
9.3	MS15-092
9.3	MS15-091
9.3	MS15-090
9.3	MS15-082
9.3	MS15-081
9.3	MS15-080
9.3	MS15-079
9.3	MS15-078
9.3	MS15-066
9.3	MS15-065
9.3	MS15-060
9.3	MS15-059
9.3	MS15-057
9.3	MS15-056
9.3	MS15-049
9.3	MS15-048
9.3	MS15-046
9.3	MS15-045
9.3	MS15-044
9.3	MS15-043
9.3	MS15-035
9.3	MS15-033
9.3	MS15-032
9.3	MS15-022
9.3	MS15-021
9.3	MS15-020
9.3	MS15-019
9.3	MS15-018
9.3	MS15-012
9.3	MS15-009
9.3	MS15-004
9.3	MS13-084
9.3	CVE-2015-2424
9.3	CVE-2015-2415
9.3	CVE-2015-2380
9.3	CVE-2015-2379
9.3	CVE-2015-2377
9.3	CVE-2015-2376
9	MS15-083
8.5	MS15-058
8.3	MS15-011
7.8	MS15-030
7.8	MS15-007
7.2	MS15-135
7.2	MS15-133
7.2	MS15-132
7.2	MS15-119
7.2	MS15-117
7.2	MS15-111
7.2	MS15-102
7.2	MS15-085
7.2	MS15-077
7.2	MS15-076
7.2	MS15-073
7.2	MS15-072
7.2	MS15-068
7.2	MS15-061
7.2	MS15-051
7.2	MS15-038
7.2	MS15-037
7.2	MS15-025
7.2	MS15-023
7.2	MS15-015
7.2	MS15-010
7.2	MS15-003
7.2	MS15-001
6.9	MS15-074
6.9	MS15-069
6.9	MS15-063
6.9	MS15-050
6.9	MS15-017
6.9	CVE-2015-2378
6.8	MS15-120
6.8	MS15-064
6.1	MS15-005
6	MS15-047
5.8	MS15-121
5.8	MS15-040
5	MS15-107
5	MS15-103
5	MS15-075
5	MS15-055
5	MS15-026
4.9	MS15-122
4.7	MS15-008
4.6	MS15-052
4.3	MS15-123
4.3	MS15-118
4.3	MS15-104
4.3	MS15-088
4.3	MS15-087
4.3	MS15-086
4.3	MS15-084
4.3	MS15-062
4.3	MS15-053
4.3	MS15-039
4.3	MS15-036
4.3	MS15-031
4.3	MS15-029
4.3	MS15-027
4.3	MS15-024
4.3	MS15-016
4.3	MS15-013
4.3	CVE-2015-2375
4	MS15-096
3.3	MS15-071
3.3	MS15-014
2.6	MS15-089
2.6	MS15-041
2.1	MS15-042
2.1	MS15-028
1.9	MS15-105
1.9	MS15-054
1.9	MS15-006
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 143 more Alert(s)

9.3 - MS15-070

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU