Lucene search
HistoryDec 11, 2014 - 12:59 a.m.
CVE-2014-6364
microsoft office
use-after-free
vulnerability
remote code execution
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.306
Percentile
97.0%
Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Component Use After Free Vulnerability.”
Affected configurations
Node
microsoftofficeMatch2007sp3
ORmicrosoftofficeMatch2010sp2x64
ORmicrosoftofficeMatch2010sp2x86
ORmicrosoftofficeMatch2013
ORmicrosoftofficeMatch2013gold
ORmicrosoftofficeMatch2013rt_gold
ORmicrosoftofficeMatch2013sp1
ORmicrosoftofficeMatch2013sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | office | 2007 | cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:* |
| microsoft | office | 2010 | cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:* |
| microsoft | office | 2010 | cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:* |
| microsoft | office | 2013 | cpe:2.3:a:microsoft:office:2013:*:*:*:*:*:*:* |
| microsoft | office | 2013 | cpe:2.3:a:microsoft:office:2013:*:*:*:gold:*:*:* |
| microsoft | office | 2013 | cpe:2.3:a:microsoft:office:2013:*:*:*:rt_gold:*:*:* |
| microsoft | office | 2013 | cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:* |
| microsoft | office | 2013 | cpe:2.3:a:microsoft:office:2013:sp2:*:*:*:*:*:* |
Related
cve
cve
CVE-2014-6364
2014-12-11 00:59:14
cvelist
cvelist
CVE-2014-6364
2014-12-11 00:00:00
nessus
nessus
checkpoint_advisories
checkpoint_advisories
symantec
symantec
mskb
mskb
prion
prion
Design/Logic Flaw
2014-12-11 00:59:00
openvas
openvas
Microsoft Office Remote Code Execution Vulnerability (3017349)
2014-12-10 00:00:00
securityvulns
securityvulns
Microsoft Office multiple security vulnerabilities
2015-01-14 00:00:00
kaspersky
kaspersky
KLA10616 Multiple vulnerabilities in Microsoft Office
2014-12-09 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.306
Percentile
97.0%
Related for NVD:CVE-2014-6364