Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

Bugtraq ID:	66385
Class:	Unknown
CVE:	CVE-2014-1761
Remote:	Yes
Local:	No
Published:	Mar 24 2014 12:00AM
Updated:	Apr 17 2014 01:02AM
Credit:	Drew Hintz, Shane Huntley, and Matty Pellegrino of the Google Security Team
Vulnerable:	Microsoft Word Viewer 0 Microsoft Word 2007 SP3 Microsoft Word 2003 SP3 Microsoft Office Web Apps 2010 SP1 Microsoft Office Compatibility Pack SP3
Not Vulnerable:

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

Microsoft Word is prone to a remote memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

The following exploit is available:

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

• /data/vulnerabilities/exploits/66385.rb

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

References:

• Microsoft Word Homepage (Microsoft )