(MS14-023) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2961037)

Publish date: May 16, 2014
  Severity: HIGH
  CVE Identifier: CVE-2014-1808
  Advisory Date: MAY 16, 2014

  DESCRIPTION

This security update resolves two privately reported vulnerabilities in Microsoft Office. The most severe vulnerability could allow remote code execution if a user opens an Office file that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Office 2007 Service Pack 3 (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 (32-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (mso)
  • Microsoft Office 2013 (64-bit editions) (proofing tools)
  • Microsoft Office 2010 Service Pack 1 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 2 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 1 (64-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (proofing tools)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (proofing tools)
  • Microsoft Office 2013 (64-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (mso)
  • Microsoft Office 2013 RT (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (mso)
  • Microsoft Office 2013 RT (mso)

Featured Stories