Lucene search

K
cve[email protected]CVE-2014-0259
HistoryJan 15, 2014 - 4:13 p.m.

CVE-2014-0259

2014-01-1516:13:03
CWE-119
web.nvd.nist.gov
30
cve-2014-0259
microsoft word
office compatibility pack
remote code execution
memory corruption
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.6 High

AI Score

Confidence

High

0.443 Medium

EPSS

Percentile

97.4%

Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka β€œWord Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftoffice_compatibility_packsp3
OR
microsoftwordMatch2007sp3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.6 High

AI Score

Confidence

High

0.443 Medium

EPSS

Percentile

97.4%