CVE-2015-2378

Published: Jul 14, 2015Modified: May 6, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Microsoft Excel DLL Remote Code Execution Vulnerability."

Affected (5)

Products: Microsoft: Excel, Excel Viewer, Office Compatibility Pack

Microsoft

3 products

Excel

Excel Viewer

Office Compatibility Pack

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2007 sp3
Microsoft Excel	Version 2010 sp2
Microsoft Excel	Version 2010 sp2
Microsoft Excel Viewer	Version 2007 sp3
Microsoft Office Compatibility Pack	All versions

References (4)

http://www.securitytracker.com/id/1032899

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070

Source: secure@microsoft.com

http://www.securitytracker.com/id/1032899

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.