CVE-2014-0260

2014-01-1516:13:03

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-0260

microsoft word

remote code execution

memory corruption

office compatibility pack

sharepoint server

office web apps

8.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.443 Medium

EPSS

Percentile

97.4%

JSON

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Word Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftoffice_compatibility_packsp3

microsoftoffice_web_appsMatch2010sp1

microsoftoffice_web_appsMatch2010sp2

microsoftoffice_web_apps_serverMatch2013

microsoftsharepoint_serverMatch2010sp1

microsoftsharepoint_serverMatch2010sp2

microsoftsharepoint_serverMatch2013

microsoftwordMatch2003sp3

microsoftwordMatch2007sp3

microsoftwordMatch2010sp1

microsoftwordMatch2010sp2

microsoftwordMatch2013

microsoftword_viewer

CPENameOperatorVersion
microsoft:office_compatibility_packmicrosoft office compatibility packeq*
microsoft:office_web_appsmicrosoft office web appseq2010
microsoft:office_web_apps_servermicrosoft office web apps servereq2013
microsoft:sharepoint_servermicrosoft sharepoint servereq2010
microsoft:sharepoint_servermicrosoft sharepoint servereq2013
microsoft:wordmicrosoft wordeq2003
microsoft:wordmicrosoft wordeq2007
microsoft:wordmicrosoft wordeq2010
microsoft:wordmicrosoft wordeq2013
microsoft:word_viewermicrosoft word viewereq*

CPE	Name	Operator	Version
microsoft:office_compatibility_pack	microsoft office compatibility pack	eq	*
microsoft:office_web_apps	microsoft office web apps	eq	2010
microsoft:office_web_apps_server	microsoft office web apps server	eq	2013
microsoft:sharepoint_server	microsoft sharepoint server	eq	2010
microsoft:sharepoint_server	microsoft sharepoint server	eq	2013
microsoft:word	microsoft word	eq	2003
microsoft:word	microsoft word	eq	2007
microsoft:word	microsoft word	eq	2010
microsoft:word	microsoft word	eq	2013
microsoft:word_viewer	microsoft word viewer	eq	*