deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-7412
Published: 2015-11-08
Description: The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote attackers to obtain plaintext data via a padding-oracle attack.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT10701; http://www-01.ibm.com/support/docview.wss?uid=swg21964170; http://www-01.ibm.com/support/docview.wss?uid=swg1IT10701
CVE: CVE-2015-2695
Published: 2015-11-09
Description: lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-763
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html
CVE: CVE-2015-2696
Published: 2015-11-09
Description: lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call.
CVSS Score: 7.1 (HIGH)
CWE: CWE-18
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html
CVE: CVE-2015-2697
Published: 2015-11-09
Description: The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8252; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html
CVE: CVE-2015-2213
Published: 2015-11-09
Description: SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via a comment that is mishandled after retrieval from the trash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://openwall.com/lists/oss-security/2015/08/04/7; http://www.debian.org/security/2015/dsa-3332; http://www.debian.org/security/2015/dsa-3383
CVE: CVE-2015-5730
Published: 2015-11-09
Description: The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time comparison for widgets, which allows remote attackers to conduct a timing side-channel attack by measuring the delay before inequality is calculated.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2015/08/04/7; http://www.debian.org/security/2015/dsa-3332; http://www.securityfocus.com/bid/76160
CVE: CVE-2015-5731
Published: 2015-11-09
Description: Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://openwall.com/lists/oss-security/2015/08/04/7; http://www.debian.org/security/2015/dsa-3332; http://www.debian.org/security/2015/dsa-3383
CVE: CVE-2015-5732
Published: 2015-11-09
Description: Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2015/08/04/7; http://www.debian.org/security/2015/dsa-3332; http://www.debian.org/security/2015/dsa-3383
CVE: CVE-2015-5733
Published: 2015-11-09
Description: Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2015/08/04/7; http://www.securityfocus.com/bid/76331; http://www.securitytracker.com/id/1033178
CVE: CVE-2015-5734
Published: 2015-11-09
Description: Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2015/08/04/7; http://www.debian.org/security/2015/dsa-3332; http://www.debian.org/security/2015/dsa-3383
CVE: CVE-2014-8873
Published: 2015-11-09
Description: A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2015/dsa-3235; http://www.debian.org/security/2015/dsa-3316; http://www.openwall.com/lists/oss-security/2015/07/18/2
CVE: CVE-2015-3240
Published: 2015-11-09
Description: The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://rhn.redhat.com/errata/RHSA-2015-1979.html; http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/77536
CVE: CVE-2015-5218
Published: 2015-11-09
Description: Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.
CVSS Score: 2.1 (LOW)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html; http://www.spinics.net/lists/util-linux-ng/msg11873.html; https://bugzilla.redhat.com/show_bug.cgi?id=1259322
CVE: CVE-2015-7295
Published: 2015-11-09
Description: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169624.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169767.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169802.html
CVE: CVE-2015-7940
Published: 2015-11-09
Description: The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200, CWE-310
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174915.html; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00012.html; http://rhn.redhat.com/errata/RHSA-2016-2035.html
CVE: CVE-2015-8041
Published: 2015-11-09
Description: Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00037.html; http://lists.opensuse.org/opensuse-updates/2015-11/msg00041.html; http://w1.fi/security/2015-5/incomplete-wps-and-p2p-nfc-ndef-record-payload-length-validation.txt
CVE: CVE-2015-8095
Published: 2015-11-09
Description: The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an unspecified URL pattern.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://www.drupal.org/node/2608382; https://www.drupal.org/node/2608414; https://www.drupal.org/node/2608382
CVE: CVE-2015-8096
Published: 2015-11-09
Description: Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119, CWE-189
References: http://packetstormsecurity.com/files/134084/Google-Picasa-Phase-One-Tags-Processing-Integer-Overflow.html; http://secunia.com/secunia_research/2015-3/; http://www.securityfocus.com/archive/1/536761/100/0/threaded
CVE: CVE-2015-8001
Published: 2015-11-09
Description: The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.
CVSS Score: 3.5 (LOW)
CWE: CWE-284
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html; https://phabricator.wikimedia.org/T91203
CVE: CVE-2015-8002
Published: 2015-11-09
Description: The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html; https://phabricator.wikimedia.org/T91205
CVE: CVE-2015-8003
Published: 2015-11-09
Description: MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html; https://phabricator.wikimedia.org/T91850
CVE: CVE-2015-8004
Published: 2015-11-09
Description: MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html; https://phabricator.wikimedia.org/T95589
CVE: CVE-2015-8005
Published: 2015-11-09
Description: MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000181.html; https://phabricator.wikimedia.org/T108616
CVE: CVE-2015-8006
Published: 2015-11-09
Description: Cross-site scripting (XSS) vulnerability in the PageTriage toolbar in the PageTriage extension for MediWiki allows remote attackers to inject arbitrary web script or HTML via the page title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000182.html; https://phabricator.wikimedia.org/T111029
CVE: CVE-2015-8007
Published: 2015-11-09
Description: The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034028; https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-October/000182.html; https://phabricator.wikimedia.org/T110553
CVE: CVE-2015-5655
Published: 2015-11-10
Description: The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://jvn.jp/en/jp/JVN48211537/995687/index.html; http://jvn.jp/en/jp/JVN48211537/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000159
CVE: CVE-2015-6362
Published: 2015-11-10
Description: The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151109-cg-nms; http://www.securitytracker.com/id/1034106; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151109-cg-nms
CVE: CVE-2015-8100
Published: 2015-11-10
Description: The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://packetstormsecurity.com/files/134323/OpenBSD-net-snmp-Information-Disclosure.html; http://www.openwall.com/lists/oss-security/2015/11/09/6; http://www.securitytracker.com/id/1034099
CVE: CVE-2015-4551
Published: 2015-11-10
Description: LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2015-2619.html; http://www.debian.org/security/2015/dsa-3394; http://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/
CVE: CVE-2015-5212
Published: 2015-11-10
Description: Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-191
References: http://rhn.redhat.com/errata/RHSA-2015-2619.html; http://www.debian.org/security/2015/dsa-3394; http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/
CVE: CVE-2015-5213
Published: 2015-11-10
Description: Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://rhn.redhat.com/errata/RHSA-2015-2619.html; http://www.debian.org/security/2015/dsa-3394; http://www.libreoffice.org/about-us/security/advisories/cve-2015-5213/
CVE: CVE-2015-5214
Published: 2015-11-10
Description: LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2015-2619.html; http://www.debian.org/security/2015/dsa-3394; http://www.libreoffice.org/about-us/security/advisories/cve-2015-5214/
CVE: CVE-2015-7828
Published: 2015-11-10
Description: SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the (1) fcopydir, (2) fmkdir, (3) frmdir, (4) getenv, (5) dumpenv, (6) fcopy, (7) fput, (8) fdel, (9) fmove, (10) fget, (11) fappend, (12) fdir, (13) getTraces, (14) kill, (15) pexec, (16) stop, or (17) pythonexec method, aka SAP Security Note 2165583.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/134281/SAP-HANA-TrexNet-Command-Execution.html; http://seclists.org/fulldisclosure/2015/Nov/36; https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-edition
CVE: CVE-2015-7991
Published: 2015-11-10
Description: The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to read web dispatcher and security trace files and possibly obtain passwords via unspecified vectors, aka SAP Security Note 2148854.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/134283/SAP-HANA-Remote-Trace-Disclosure.html; http://seclists.org/fulldisclosure/2015/Nov/37; http://www.onapsis.com/research/security-advisories/SAP_HANA_Remote_Trace_Disclosure
CVE: CVE-2015-7992
Published: 2015-11-10
Description: SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to cause a denial of service (memory corruption and indexserver crash) via unspecified vectors to the EXECUTE_SEARCH_RULE_SET stored procedure, aka SAP Security Note 2175928.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://packetstormsecurity.com/files/134284/SAP-HANA-EXECUTE_SEARCH_RULE_SET-Stored-Procedure-Memory-Corruption.html; http://scn.sap.com/community/security/blog/2015/08/18/sap-security-notes-august-2015; http://seclists.org/fulldisclosure/2015/Nov/38
CVE: CVE-2015-7993
Published: 2015-11-10
Description: The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/134286/SAP-HANA-HTTP-Login-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2015/Nov/39; https://www.onapsis.com/blog/analyzing-sap-security-notes-september-2015
CVE: CVE-2015-7994
Published: 2015-11-10
Description: The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "SQL Login," aka SAP Security Note 2197428.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/134287/SAP-HANA-SQL-Login-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2015/Nov/40; https://www.onapsis.com/blog/analyzing-sap-security-notes-october-2015
CVE: CVE-2015-8025
Published: 2015-11-10
Description: driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00102.html; http://www.debian.org/security/2016/dsa-3438; http://www.openwall.com/lists/oss-security/2015/10/24/2
CVE: CVE-2015-8105
Published: 2015-11-10
Description: Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00030.html; http://trac.roundcube.net/changeset/dd7db2179/github; http://trac.roundcube.net/ticket/1490530
CVE: CVE-2015-1302
Published: 2015-11-11
Description: The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://googlechromereleases.blogspot.com/2015/11/stable-channel-update.html; http://lists.opensuse.org/opensuse-updates/2015-11/msg00120.html; http://lists.opensuse.org/opensuse-updates/2015-11/msg00121.html
CVE: CVE-2015-2427
Published: 2015-11-11
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034112; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-112; http://www.securitytracker.com/id/1034112
CVE: CVE-2015-2478
Published: 2015-11-11
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application that triggers a Winsock call referencing an invalid address, aka "Winsock Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034121; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-119; http://www.securitytracker.com/id/1034121
CVE: CVE-2015-2503
Published: 2015-11-11
Description: Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2, Publisher 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Pinyin IME 2010, Access 2013 SP1, Excel 2013 SP1, InfoPath 2013 SP1, OneNote 2013 SP1, PowerPoint 2013 SP1, Project 2013 SP1, Publisher 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, OneNote 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Access 2016, Excel 2016, OneNote 2016, PowerPoint 2016, Project 2016, Publisher 2016, Visio 2016, Word 2016, Skype for Business 2016, and Lync 2013 SP1 allow remote attackers to bypass a sandbox protection mechanism and gain privileges via a crafted web site that is accessed with Internet Explorer, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Microsoft Office Elevation of Privilege Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034117; http://www.securitytracker.com/id/1034119; http://www.securitytracker.com/id/1034122