What is CVE-2015-2455?

CVE-2015-2455 is a vulnerability in Microsoft Live_meeting, classified under Improper Input Validation. Published 2015-08-15.

Is CVE-2015-2455 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Microsoft Live_meeting

CVE-2015-2455

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 201…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.532 (98.0th percentile) — read the EPSS interpretation.

Affected products

Microsoft Live_meeting — versions 2007
Microsoft Lync — versions 2010, 2013
Microsoft Lync_basic — versions 2013
Microsoft .Net_framework — versions 3.0, 4.0, 4.5
Microsoft Office — versions 2007, 2010
Microsoft Silverlight
Microsoft Windows_10
Microsoft Windows_7
Microsoft Windows_8
Microsoft Windows_8.1

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

googleprojectzero/BrokenType

References

MS15-080 (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
37919 (Exploit, exploit, Third Party Advisory, VDB Entry, x_refsource_EXPLOIT-DB)
1033238 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
76216 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2015-2455?: CVE-2015-2455 is a vulnerability in Microsoft Live_meeting, classified under Improper Input Validation. Published 2015-08-15.
Is CVE-2015-2455 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.