KLA10456 SB vulnerability in MS Office

An use-after-free vulnerability was found in Microsoft Office. By exploiting this vulnerability malicious users can bypass ASLR protection. This vulnerability can be exploited remotely via a specially designed document.

Original advisories

MS bulletin

CVE-2014-6362

Related products

Microsoft-Office

CVE list

CVE-2014-6362 warning

KB list

2920795

2920748

2910941

3033857

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 2Microsoft Office 2013Microsoft Office 2013 Service Pack 1