PT-2014-1203 · Microsoft · Office

Published 2014-05-14 · Updated 2018-10-30 · CVE-2014-1756

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1

Description The issue is related to errors in checking the path of loaded dynamic libraries in Microsoft Office. This allows a remote attacker to execute arbitrary code contained in a dynamic library located in the directory of the opened document. The vulnerability can be exploited when the Simplified Chinese Proofing Tool is enabled, allowing local users to gain privileges via a Trojan horse DLL in the current working directory.

Recommendations For Microsoft Office 2007 SP3, consider disabling the Simplified Chinese Proofing Tool until a patch is available. For Microsoft Office 2010 SP1 and SP2, restrict access to the current working directory to minimize the risk of exploitation. For Microsoft Office 2013 Gold, SP1, RT, and RT SP1, avoid using the affected feature when the Simplified Chinese Proofing Tool is enabled until the issue is resolved.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2014-00362

CVE-2014-1756

Affected Products

Office

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1756 · Security Note
• https://bdu.fstec.ru/vul/2014-00362 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-1756 · Security Note
• http://technet.microsoft.com/ru-ru/security/bulletin/ms14-023 · Note