Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Excel 2007/2010 can run malicious code from current folder

CVE-2015-2378 · published 11 years ago
Summary

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3 and the Office Compatibility Pack SP3 can load a program file placed in the same directory as the spreadsheet. This lets someone with local access make the application run that file with the user’s privileges, potentially giving the attacker more control. Install the latest updates from Microsoft or apply the provided security patch to stop this behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft excel 2007
2010
cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
microsoft excel_viewer 2007
cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
microsoft office_compatibility_pack All versions
cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
Original advisory text
Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DL...
Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Microsoft Excel DLL Remote Code Execution Vulnerability."
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
6.9 Medium
Exploitation
6% chance of attack within 30 days
Timeline
Published14 Jul 2015
Updated1 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-2378 · NVD
Track software like this
Free during beta