CVE-2015-2092
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows...
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."
Exploit likelihood
What each source reports
NVD Score used
7.5
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."
- Record
CVE-2015-2092- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."
- Record
CVE-2015-2092- Updated
- 2026-11-02
EUVDEUVD-2015-2202 No score
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."
- Record
EUVD-2015-2202- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4c2x-qgm5-5mrh No score
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows...
The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds."
- Record
GHSA-4c2x-qgm5-5mrh- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2092 is a high vulnerability (CVSS 7.5) in Agilent Technologies Feature Extraction, published March 9, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.79%, the 86th percentile. No source names a fixed version.