PT-2014-1206 · Microsoft · Office For Mac+6

Drew Hintz + 2 · Published 2014-03-24 · Updated 2025-04-07 · CVE-2014-1761

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT Word Viewer Office Compatibility Pack version SP3 Office for Mac version 2011 Word Automation Services on SharePoint Server versions 2010 SP1 and SP2 and 2013 Office Web Apps versions 2010 SP1 and SP2 Office Web Apps Server version 2013

Description A remote code execution issue exists due to the way Microsoft Word handles specially crafted files, allowing an attacker to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data. This issue has been exploited in the wild. An attacker who successfully exploits this issue could run arbitrary code as the current user, potentially taking complete control of the affected system if the current user has administrative rights.

Recommendations For Microsoft Word versions 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT, update to a version that includes the fix for this issue. For Word Viewer, update to a version that includes the fix for this issue. For Office Compatibility Pack version SP3, update to a version that includes the fix for this issue. For Office for Mac version 2011, update to a version that includes the fix for this issue. For Word Automation Services on SharePoint Server versions 2010 SP1 and SP2 and 2013, update to a version that includes the fix for this issue. For Office Web Apps versions 2010 SP1 and SP2, update to a version that includes the fix for this issue. For Office Web Apps Server version 2013, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the handling of specially crafted RTF files until a patch is available.

Exploit

Fix

RCE

DoS

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2014-00365

BDU:2014-00366

BDU:2014-00367

BDU:2014-00368

BDU:2014-00369

BDU:2014-00370

CVE-2014-1761

Affected Products

Office Word

Office Compatibility Pack

Office Web Apps

Office Web Apps Server

Office For Mac

Sharepoint Server

Word Viewer

References · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_017_rtf.rb · Exploit
• 🔥 https://exploit-db.com/exploits/32793 · Exploit
• https://bdu.fstec.ru/vul/2014-00366 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00369 · Security Note
• https://bdu.fstec.ru/vul/2014-00365 · Security Note
• http://technet.microsoft.com/security/advisory/2953095 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00367 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1761 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-1761 · Security Note
• https://bdu.fstec.ru/vul/2014-00370 · Security Note
• https://bdu.fstec.ru/vul/2014-00368 · Security Note
• https://t.me/cvenotify/87253 · Telegram Post
• https://t.me/nekaspersky/1796 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1761 · Note