Lucene search

K
cve[email protected]CVE-2014-6356
HistoryDec 11, 2014 - 12:59 a.m.

CVE-2014-6356

2014-12-1100:59:00
CWE-94
web.nvd.nist.gov
23
cve-2014-6356
microsoft word
remote code execution
office document
security vulnerability

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.124 Low

EPSS

Percentile

95.4%

Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka “Invalid Index Remote Code Execution Vulnerability.”

7.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.124 Low

EPSS

Percentile

95.4%