Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-1761
HistoryMar 25, 2014 - 1:24 p.m.

CVE-2014-1761

2014-03-2513:24:01
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.634 Medium

EPSS

Percentile

97.9%

JSON

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.

Affected configurations

NVD
Node
microsoftofficeMatch2011mac
OR
microsoftoffice_compatibility_packsp3
OR
microsoftoffice_web_appsMatch2010sp1
OR
microsoftoffice_web_appsMatch2010sp2
OR
microsoftoffice_web_apps_serverMatch2013
OR
microsoftsharepoint_serverMatch2010sp1
OR
microsoftsharepoint_serverMatch2010sp2
OR
microsoftsharepoint_serverMatch2013
OR
microsoftwordMatch2003sp3
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp1x64
OR
microsoftwordMatch2010sp1x86
OR
microsoftwordMatch2010sp2x64
OR
microsoftwordMatch2013
OR
microsoftwordMatch2013rt
OR
microsoftword_viewer

Related

saint 4
seebug 2
thn 2
nessus 3
zdt 1
symantec 1
packetstorm 1
openvas 10
securityvulns 2
cve 1
checkpoint_advisories 3
attackerkb 1
metasploit 1
cisa_kev 1
prion 1
cvelist 1
exploitdb 1
threatpost 2
carbonblack 1
mskb 1
fireeye 2
cisa 1
kaspersky 1
myhack58 1
qualysblog 1
saint
saint
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
seebug
seebug
Microsoft Word RTFζ–‡δ»Άθ§£ζžι”™θ――δ»£η ζ‰§θ‘ŒζΌζ΄ž
2014-03-25 00:00:00
MS14-017 Microsoft Word RTF Object Confusion
2014-07-01 00:00:00
thn
thn
Microsoft Word Zero-Day Vulnerability is being exploited in the Wild
2014-03-24 19:37:00
Microsoft Critical Vulnerabilities that You Must Patch Coming Tuesday
2014-04-05 00:04:00
nessus
nessus
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660) (Mac OS X)
2014-04-08 00:00:00
MS KB2953095: Vulnerability in Microsoft Word Could Allow Remote Code Execution
2014-03-24 00:00:00
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660)
2014-04-08 00:00:00
zdt
zdt
MS14-017 Microsoft Word RTF Object Confusion Exploit
2014-04-09 00:00:00
symantec
symantec
Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability
2014-03-24 00:00:00
packetstorm
packetstorm
MS14-017 Microsoft Word RTF Object Confusion
2014-04-09 00:00:00
openvas
openvas
Microsoft Office Web Apps Memory Corruption Vulnerability (2949660)
2014-04-09 00:00:00
Microsoft SharePoint Server WAS Memory Corruption Vulnerability (2949660)
2014-04-09 00:00:00
Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (2949660)
2014-04-09 00:00:00
securityvulns
securityvulns
Microsoft Office memory corruption
2014-03-25 00:00:00
Microsoft Office multiple security vulnerabilities
2014-05-14 00:00:00
cve
cve
CVE-2014-1761
2014-03-25 13:24:01
checkpoint_advisories
checkpoint_advisories
Microsoft Word RTF listoverridecount Memory Corruption (MS14-017; CVE-2014-1761)
2014-07-16 00:00:00
Microsoft Word RTF listoverridecount Memory Corruption - Ver2 (CVE-2014-1761)
2015-03-26 00:00:00
Microsoft Word RTF listoverridecount Remote Code Execution (MS12-079; CVE-2012-2539; CVE-2014-1761)
2012-12-11 00:00:00
attackerkb
attackerkb
CVE-2014-1761
2014-03-25 00:00:00
metasploit
metasploit
MS14-017 Microsoft Word RTF Object Confusion
2014-04-08 18:44:20
cisa_kev
cisa_kev
Microsoft Word Memory Corruption Vulnerability
2022-02-15 00:00:00
prion
prion
Memory corruption
2014-03-25 13:24:00
cvelist
cvelist
CVE-2014-1761
2014-03-24 19:00:00
exploitdb
exploitdb
Microsoft Word - RTF Object Confusion (MS14-017) (Metasploit)
2014-04-10 00:00:00
threatpost
threatpost
Researchers: PlugX More Prominent Than Ever
2015-02-10 09:00:34
Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
2022-02-11 19:57:34
carbonblack
carbonblack
Threat Analysis: Pylot (Travle) Malware Family
2018-01-26 17:46:11
mskb
mskb
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps could allow remote code execution: April 8, 2014
2014-04-08 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
kaspersky
kaspersky
KLA10616 Multiple vulnerabilities in Microsoft Office
2014-12-09 00:00:00
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.634 Medium

EPSS

Percentile

97.9%

JSON
Related for NVD:CVE-2014-1761
saint4seebug2thn2nessus3zdt1symantec1packetstorm1openvas10securityvulns2cve1checkpoint_advisories3attackerkb1metasploit1cisa_kev1prion1cvelist1exploitdb1threatpost2carbonblack1mskb1fireeye2cisa1kaspersky1myhack581qualysblog1