CVE-2015-2545 — VulnIntel

CVE-2015-2545

HIGH

KEV

Exploit

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability."

설명

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability."

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 86.1%
(상위 99.7%)
Attack Vector: Local Access
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 09/09/2015(11 years ago)
Modified: 04/22/2026(3 months ago)
Source: KEV, NVD
Products: 1

CISA KEV Listing

Vendor / Project: Microsoft
Product: Office

Date Added: 03/03/2022
Due Date: 03/24/2022Overdue 1581d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished09/09/2015
CISA KEVKEV Listed03/03/2022
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	9.3

References (4)

NVD
Exploit
http://blog.morphisec.com/exploit-bypass-emet-cve-2015-2545
NVD
Third Party Advisory
http://www.securitytracker.com/id/1033488
NVD
Patch

Affected Products (1)

Impact	78.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00