CVE-2015-2557

critical Microsoft
CVSS v3 Base Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
34.6%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: October 14, 2015 (3866 days ago)
Last Modified: May 6, 2026
Vendor: Microsoft
Source: NVD

Description

Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML data in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."

CWE

CWE-119

Affected Products

microsoft visio

References

🔗 www.securitytracker.com 🔗 www.zerodayinitiative.com 🔗 docs.microsoft.com 🔗 www.securitytracker.com 🔗 www.zerodayinitiative.com