CVE-2015-2431 : Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Ly

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component Remote Code Execution Vulnerability."

Published 2015-08-15 00:59:08

Updated 2018-10-12 22:09:31

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Input validationExecute code

Products affected by CVE-2015-2431

Microsoft » Office » Version: 2010 Update SP2 For X86
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:x86:*
Matching versions
Microsoft » Office » Version: 2010 Update SP2 For X64
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:x64:*
Matching versions
Microsoft » Lync » Version: 2010 Attendee Edition
cpe:2.3:a:microsoft:lync:2010:*:*:*:attendee:*:*:*
Matching versions
Microsoft » Lync » Version: 2010 For X86
cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:x86:*
Matching versions
Microsoft » Lync » Version: 2010 For X64
cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:x64:*
Matching versions
Microsoft » Lync Basic » Version: 2013 Update SP1 For X64
cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:x64:*
Matching versions
Microsoft » Lync Basic » Version: 2013 Update SP1 For X86
cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:x86:*
Matching versions
Microsoft » Live Meeting » Version: 2007
cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2015-2431

Top countries where our scanners detected CVE-2015-2431

Top open port discovered on systems with this issue 443

IPs affected by CVE-2015-2431 110

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2015-2431!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2015-2431

EPSS FAQ

62.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-2431

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2015-2431

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-2431

https://www.exploit-db.com/exploits/37911/

Microsoft Office 2007 - 'OGL.dll' DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)
http://www.securitytracker.com/id/1033238

Microsoft Graphics Component Bugs Let Remote Users Execute Arbitrary Code and Remote Authenticated Users Bypass Security Features and Gain Elevated Privileges - SecurityTracker

CVEs referencing this url
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080

Microsoft Security Bulletin MS15-080 - Critical | Microsoft Docs

CVEs referencing this url