Detections
Analytics

MS15-099: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3089664)

high Nessus Plugin ID 85879

Language:

Synopsis

The remote Windows host is affected by multiple remote code execution vulnerabilities.

Description

The remote Windows host has a version of Microsoft Office, Excel, Excel Viewer, SharePoint Server, Microsoft Office Compatibility Pack, Microsoft Office Web Apps, and/or Microsoft SharePoint Foundation installed that is affected by one or more of the following vulnerabilities :

 - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted file in Microsoft Office, resulting in execution of arbitrary code in the context of the current user. (CVE-2015-2520, CVE-2015-2521, CVE-2015-2523)

 - A cross-site scripting vulnerability exists in SharePoint due to improper sanitization of user-supplied web requests. A remote attacker can exploit this vulnerability, via a specially crafted web request, to execute arbitrary script code in the context of the current user. (CVE-2015-2522)

 - A remote code execution vulnerability exists in Microsoft Office due to improper handling of malformed graphics images. A remote attacker can exploit this vulnerability by convincing a user to open a file or visit a website containing a specially crafted EPS image binary, resulting in execution of arbitrary code in the context of the current user. (CVE-2015-2545)

Solution

Microsoft has released a set of patches for Office 2007, 2010, 2013, 2013 RT, 2016, SharePoint Server 2013, Microsoft Office Compatibility Pack, and Microsoft Office Web Apps 2013.

See Also

https://technet.microsoft.com/library/security/ms15-099

Plugin Details

Severity: High

ID: 85879

File Name: smb_nt_ms15-099.nasl

Version: 1.16

Type: local

Agent: windows

Published: 9/9/2015

Updated: 3/8/2022

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2015-2545

Vulnerability Information

CPE: cpe:/a:microsoft:office_web_apps_server, cpe:/a:microsoft:sharepoint_server, cpe:/a:microsoft:excel, cpe:/a:microsoft:office_compatibility_pack, cpe:/a:microsoft:sharepoint_foundation, cpe:/a:microsoft:office, cpe:/a:microsoft:excel_viewer

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/8/2015

Vulnerability Publication Date: 9/8/2015

CISA Known Exploited Vulnerability Due Dates: 3/24/2022

Exploitable With

Core Impact

Reference Information

CVE: CVE-2015-2520, CVE-2015-2521, CVE-2015-2522, CVE-2015-2523, CVE-2015-2545

BID: 76561, 76562, 76564, 76588, 76667