CVE-2015-2431

CVE Database · CVE-2015-2431

CVE-2015-2431

· N/AModified

CVSS v3.1

N/A

EPSS

29.84%

Published

Aug 14, 2015

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Office 2007 - 'OGL.dll' DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font, aka "Microsoft Office Graphics Component Remote Code Execution Vulnerability."

Weaknesses (CWE)

CWE-20

Affected Products (8)

microsoft · live_meetingvulnerable

microsoft · lyncvulnerable

microsoft · lync_basicvulnerable

microsoft · officevulnerable

References (6)

http://www.securitytracker.com/id/1033238

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080

https://www.exploit-db.com/exploits/37911/

http://www.securitytracker.com/id/1033238

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080

https://www.exploit-db.com/exploits/37911/

KEV Catalog EPSS Scores Vendors All CVEs