Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
References
Link | Resource |
---|---|
http://technet.microsoft.com/security/advisory/2953095 | Patch Vendor Advisory |
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 | Patch Vendor Advisory |
http://technet.microsoft.com/security/advisory/2953095 | Patch Vendor Advisory |
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:04
Type | Values Removed | Values Added |
---|---|---|
References | () http://technet.microsoft.com/security/advisory/2953095 - Patch, Vendor Advisory | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 - Patch, Vendor Advisory |
24 Jul 2024, 16:05
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:microsoft:word:2013:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:x64:* cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2010:sp1:*:*:*:x86:*:* cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:* cpe:2.3:a:microsoft:word:2010:sp1:*:*:*:*:x64:* |
cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:word:2010:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2013:sp1:*:*:-:*:*:* cpe:2.3:a:microsoft:word:2013:*:*:*:-:*:*:* cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:* |
References | () http://technet.microsoft.com/security/advisory/2953095 - Patch, Vendor Advisory | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 - Patch, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 9.3
v3 : 7.8 |
CWE | CWE-787 |
Information
Published : 2014-03-25 13:24
Updated : 2024-11-21 02:04
NVD link : CVE-2014-1761
Mitre link : CVE-2014-1761
CVE.ORG link : CVE-2014-1761
JSON object : View
Products Affected
microsoft
- office_web_apps
- office_compatibility_pack
- office
- office_web_apps_server
- sharepoint_server
- word
- word_viewer
CWE
CWE-787
Out-of-bounds Write