Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

The remote Windows host has a version of Microsoft Office, Access, Excel, InfoPath, OneNote, PowerPoint, Project, Publisher, Visio, Word, Excel Viewer, Word Viewer, SharePoint Server, Office Compatibility Pack, Office Web Apps, Skype for Business, or Lync installed that is affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist due     to improper handling of objects in memory. A remote     attacker can exploit these vulnerabilities by convincing     a user to open a specially crafted Office file,     resulting in execution of arbitrary code in the context     of the current user. (CVE-2015-6038, CVE-2015-6091,     CVE-2015-6092, CVE-2015-6093, CVE-2015-6094)

  - An elevation of privilege vulnerability exists when an     attacker instantiates an affected Office application via     a COM control. An attacker who successfully exploits     this vulnerability can gain elevated privileges and     break out of the Internet Explorer sandbox.
    (CVE-2015-2503)

The version of Microsoft Office installed on the remote Mac OS X host is affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist due     to improper handling of objects in memory. A remote     attacker can exploit these vulnerabilities by convincing     a user to open a specially crafted Office file,     resulting in execution of arbitrary code in the context     of the current user. (CVE-2015-6038, CVE-2015-6094)

  - A spoofing vulnerability exists in Microsoft Outlook for     Mac due to improper sanitization of HTML content. A     remote attacker can exploit this, via a crafted email,     to spoof content or to chain an attack to other     vulnerabilities in web services. (CVE-2015-6123)

ID	Name	Product	Family	Severity
86823	MS15-116: Security Update for Microsoft Office to Address Remote Code Execution (3104540)	Nessus	Windows : Microsoft Bulletins	high
86817	MS15-116: Security Updates for Microsoft Office to Address Remote Code Execution (3104540) (Mac OS X)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2015-6038

high

Tenable Plugins

high

high