CVE-2014-4117

🗓️ 15 Oct 2014 10:00:00Reported by microsoftType

Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka "Microsoft Word File Format Vulnerability.

Reporter	Title	Published	Views	Family All 20
BDU FSTEC	Vulnerability of Microsoft Office software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in Microsoft Office Compatibility Pack allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Office Web Apps, which allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Word software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
Check Point Advisories	Microsoft Word Memory Corruption (MS14-061: CVE-2014-4117)	14 Oct 201400:00	–	checkpoint_advisories
Cvelist	CVE-2014-4117	15 Oct 201410:00	–	cvelist
Microsoft KB	MS14-061: Vulnerability in Microsoft Word and Office Web Apps could allow remote code execution: October 14, 2014	14 Oct 201400:00	–	mskb
Kaspersky	KLA10616 Multiple vulnerabilities in Microsoft Office	9 Dec 201400:00	–	kaspersky
Tenable Nessus	MS14-061: Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)	15 Oct 201400:00	–	nessus
Tenable Nessus	MS14-061: Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)	15 Oct 201400:00	–	nessus

NVD

Node

microsoft officeMatch2007sp3

microsoft officeMatch2010sp1

microsoft officeMatch2010sp2

microsoft officeMatch2011mac

microsoft office_compatibility_packsp3

microsoft sharepoint_serverMatch2010sp1

microsoft sharepoint_serverMatch2010sp2

microsoft wordMatch2010sp1

microsoft wordMatch2010sp2

microsoft word_web_appsMatch2010gold

microsoft word_web_appsMatch2010sp1

microsoft word_web_appsMatch2010sp2

Source	Link
securityfocus	www.securityfocus.com/bid/70360
secunia	www.secunia.com/advisories/60973
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-061

17 Jun 2026 00:09Current

8.7High risk

Vulners AI Score8.7

CVSS 29.3

EPSS0.17458

CWE-20