{"api_version":"1","generated_at":"2026-07-23T07:08:51+00:00","cve":"CVE-2015-7918","urls":{"html":"https://cve.report/CVE-2015-7918","api":"https://cve.report/api/cve/CVE-2015-7918.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-7918","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-7918"},"summary":{"title":"CVE-2015-7918","description":"Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.","state":"PUBLISHED","assigner":"icscert","published_at":"2015-12-15 05:59:08","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02","name":"https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"Schneider Electric ProClima ActiveX Control Vulnerabilities | ICS-CERT","mime":"application/octet-stream","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-630","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-630","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-630 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-631","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-631","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-631 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-632","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-632","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-632 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-633","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-633","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-633 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-634","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-634","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-634 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-635","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-635","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-635 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-625","name":"http://www.zerodayinitiative.com/advisories/ZDI-15-625","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-15-625 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01","name":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"application/pdf","httpstatus":"200","archivestatus":"401"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7918","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7918","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"7918","vulnerable":"1","versionEndIncluding":"6.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"schneider-electric","cpe5":"proclima","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T08:06:30.979Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-631"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-625"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-634"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-632"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-630"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-633"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-635"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-12-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2015-12-15T04:57:02.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","shortName":"icscert"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-631"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-625"},{"tags":["x_refsource_MISC"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-634"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-632"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-630"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-633"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-635"},{"tags":["x_refsource_CONFIRM"],"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2015-7918","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-631","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-631"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-625","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-625"},{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-634","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-634"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-632","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-632"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-630","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-630"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-633","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-633"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-15-635","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-15-635"},{"name":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01","refsource":"CONFIRM","url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01"}]}}}},"cveMetadata":{"assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","assignerShortName":"icscert","cveId":"CVE-2015-7918","datePublished":"2015-12-15T02:00:00.000Z","dateReserved":"2015-10-22T00:00:00.000Z","dateUpdated":"2024-08-06T08:06:30.979Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-12-15 05:59:08","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:schneider-electric:proclima:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"12DFD1A6-BDB8-4864-A3E3-1CBF1609C17B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"7918","Ordinal":"1","Title":"CVE-2015-7918","CVE":"CVE-2015-7918","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"7918","Ordinal":"1","NoteData":"Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561.","Type":"Description","Title":"CVE-2015-7918"},{"CveYear":"2015","CveId":"7918","Ordinal":"2","NoteData":"2015-12-14","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"7918","Ordinal":"3","NoteData":"2015-12-14","Type":"Other","Title":"Modified"}]}}}