Microsoft Word Multiple Memory Corruption Vulnerabilities
Last Update Date:
15 Jan 2014 17:45
Release Date:
15 Jan 2014
3212
Views
RISK: Medium Risk
TYPE: Clients - Productivity Products
Remote code execution vulnerabilities exist in the way that affected Microsoft Office software parses specially crafted files. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Impact
- Elevation of Privilege
- Remote Code Execution
System / Technologies affected
- Microsoft Office 2003
- Microsoft Office 2007
- Microsoft Office 2010
- Microsoft Office 2013 and Microsoft Office 2013 RT
- Microsoft SharePoint Server 2010 Service Pack 1
- Microsoft SharePoint Server 2013
- Microsoft Office Web Apps 2010
- Microsoft Office Web Apps 2013
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
http://technet.microsoft.com/security/bulletin/MS14-001
Vulnerability Identifier
Source
Related Link
Share with