CVE-2014-1809

The MSCOMCTL library in several versions of Microsoft Office (including 2007 SP3, 2010 SP1/SP2, and 2013 Gold, SP1, RT, and RT SP1) contains a flaw where it does not properly implement Address Space Layout Randomization (ASLR) . This allows remote attackers to bypass ASLR protections via a crafte...