PT-2015-3850 · Microsoft · Office

Published 2015-02-10 · Updated 2018-10-12 · CVE-2014-6362

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2013 SP1

Description The issue allows remote attackers to bypass the Address Space Layout Randomization (ASLR) protection mechanism. This is achieved via a crafted document. ASLR is a security feature that randomizes the location of executable code and data in memory to prevent attackers from predicting where specific instructions are located. By bypassing ASLR, an attacker can more reliably predict memory offsets, making it easier to exploit other vulnerabilities. However, this bypass by itself does not allow arbitrary code execution. It could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Office software.

Recommendations For Microsoft Office 2007 SP3, update to a version that includes the fix for this issue. For Microsoft Office 2010 SP2, update to a version that includes the fix for this issue. For Microsoft Office 2013 Gold and SP1, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2014-6362

Affected Products

Office

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6362 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6362 · Security Note
• http://securitytracker.com/id/1031721 · Note
• http://securityfocus.com/bid/72467 · Note
• http://technet.microsoft.com/security/bulletin/ms15-013 · Note