PT-2014-1209 · Microsoft · Office Word+1

Ben Hawkes + 2 · Publicado 2014-01-14 · Atualizado 2018-10-12 · CVE-2014-0259

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 Office Compatibility Pack version SP3

Description The issue is related to errors that occur when processing specially crafted files, allowing a remote attacker to execute arbitrary code and gain full control of the system. This can result in the ability to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Word 2007 SP3, consider applying security updates or patches to resolve the issue. For Office Compatibility Pack SP3, apply the relevant security fix to prevent exploitation. As a temporary workaround, consider restricting the use of Microsoft Word and Office Compatibility Pack until a patch is available.

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2014-00378

BDU:2014-00379

CVE-2014-0259

Produtos afetados

Office Word

Office Compatibility Pack

Referências · 10

• https://bdu.fstec.ru/vul/2014-00378 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-001 · Aviso do Fabricante
• http://securitytracker.com/id/1029599 · Nota
• http://technet.microsoft.com/en-us/security/bulletin/ms14-001 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0259 · Nota de Segurança
• http://technet.microsoft.com/ru-ru/security/bulletin/ms14-001 · Nota
• http://securitytracker.com/id/1029598 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0259 · Nota de Segurança
• https://bdu.fstec.ru/vul/2014-00379 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0259 · Nota