PRIOn knowledge basePRION:CVE-2014-1809Design/Logic Flaw
6.9 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.5%
The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka “MSCOMCTL ASLR Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| office | eq | 2013 | |
| office | eq | 2010 sp1-x86 | |
| office | eq | 2007 sp3 | |
| office | eq | 2010 sp2-x64 | |
| office | eq | 2013 sp1 | |
| office | eq | 2010 sp1-x64 | |
| office | eq | 2010 sp2-x86 |
Related
6.9 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
79.5%