Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-1761
HistoryMar 25, 2014 - 1:24 p.m.

CVE-2014-1761

2014-03-2513:24:01
CWE-119
[email protected]
web.nvd.nist.gov
882
In Wild
cve-2014-1761
microsoft word
remote code execution
memory corruption
rtf
nvd
security vulnerability

9.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.634 Medium

EPSS

Percentile

97.9%

JSON

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.

Affected configurations

NVD
Node
microsoftofficeMatch2011mac
OR
microsoftoffice_compatibility_packsp3
OR
microsoftoffice_web_appsMatch2010sp1
OR
microsoftoffice_web_appsMatch2010sp2
OR
microsoftoffice_web_apps_serverMatch2013
OR
microsoftsharepoint_serverMatch2010sp1
OR
microsoftsharepoint_serverMatch2010sp2
OR
microsoftsharepoint_serverMatch2013
OR
microsoftwordMatch2003sp3
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp1x64
OR
microsoftwordMatch2010sp1x86
OR
microsoftwordMatch2010sp2x64
OR
microsoftwordMatch2013
OR
microsoftwordMatch2013rt
OR
microsoftword_viewer

Related

checkpoint_advisories 3
seebug 2
saint 4
attackerkb 1
metasploit 1
cisa_kev 1
thn 2
cvelist 1
prion 1
nessus 3
symantec 1
zdt 1
securityvulns 2
packetstorm 1
nvd 1
openvas 10
exploitdb 1
threatpost 2
carbonblack 1
mskb 1
fireeye 2
cisa 1
kaspersky 1
myhack58 1
qualysblog 1
checkpoint_advisories
checkpoint_advisories
Microsoft Word RTF listoverridecount Memory Corruption (MS14-017; CVE-2014-1761)
2014-07-16 00:00:00
Microsoft Word RTF listoverridecount Memory Corruption - Ver2 (CVE-2014-1761)
2015-03-26 00:00:00
Microsoft Word RTF listoverridecount Remote Code Execution (MS12-079; CVE-2012-2539; CVE-2014-1761)
2012-12-11 00:00:00
seebug
seebug
MS14-017 Microsoft Word RTF Object Confusion
2014-07-01 00:00:00
Microsoft Word RTFζ–‡δ»Άθ§£ζžι”™θ――δ»£η ζ‰§θ‘ŒζΌζ΄ž
2014-03-25 00:00:00
saint
saint
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
attackerkb
attackerkb
CVE-2014-1761
2014-03-25 00:00:00
metasploit
metasploit
MS14-017 Microsoft Word RTF Object Confusion
2014-04-08 18:44:20
cisa_kev
cisa_kev
Microsoft Word Memory Corruption Vulnerability
2022-02-15 00:00:00
thn
thn
Microsoft Word Zero-Day Vulnerability is being exploited in the Wild
2014-03-24 19:37:00
Microsoft Critical Vulnerabilities that You Must Patch Coming Tuesday
2014-04-05 00:04:00
cvelist
cvelist
CVE-2014-1761
2014-03-24 19:00:00
prion
prion
Memory corruption
2014-03-25 13:24:00
nessus
nessus
MS KB2953095: Vulnerability in Microsoft Word Could Allow Remote Code Execution
2014-03-24 00:00:00
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660) (Mac OS X)
2014-04-08 00:00:00
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660)
2014-04-08 00:00:00
symantec
symantec
Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability
2014-03-24 00:00:00
zdt
zdt
MS14-017 Microsoft Word RTF Object Confusion Exploit
2014-04-09 00:00:00
securityvulns
securityvulns
Microsoft Office memory corruption
2014-03-25 00:00:00
Microsoft Office multiple security vulnerabilities
2014-05-14 00:00:00
packetstorm
packetstorm
MS14-017 Microsoft Word RTF Object Confusion
2014-04-09 00:00:00
nvd
nvd
CVE-2014-1761
2014-03-25 13:24:01
openvas
openvas
Microsoft SharePoint Server WAS Memory Corruption Vulnerability (2949660)
2014-04-09 00:00:00
Microsoft Office Web Apps Memory Corruption Vulnerability (2949660)
2014-04-09 00:00:00
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)
2014-04-09 00:00:00
exploitdb
exploitdb
Microsoft Word - RTF Object Confusion (MS14-017) (Metasploit)
2014-04-10 00:00:00
threatpost
threatpost
Researchers: PlugX More Prominent Than Ever
2015-02-10 09:00:34
Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
2022-02-11 19:57:34
carbonblack
carbonblack
Threat Analysis: Pylot (Travle) Malware Family
2018-01-26 17:46:11
mskb
mskb
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps could allow remote code execution: April 8, 2014
2014-04-08 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
kaspersky
kaspersky
KLA10616 Multiple vulnerabilities in Microsoft Office
2014-12-09 00:00:00
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

9.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.634 Medium

EPSS

Percentile

97.9%

JSON
Related for CVE-2014-1761
checkpoint_advisories3seebug2saint4attackerkb1metasploit1cisa_kev1thn2cvelist1prion1nessus3symantec1zdt1securityvulns2packetstorm1nvd1openvas10exploitdb1threatpost2carbonblack1mskb1fireeye2cisa1kaspersky1myhack581qualysblog1