Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	66629
Class:	Boundary Condition Error
CVE:	CVE-2014-1758
Remote:	Yes
Local:	No
Published:	Apr 08 2014 12:00AM
Updated:	Apr 08 2014 12:00AM
Credit:	Yuhong Bao
Vulnerable:	Microsoft Word 2003 SP3
Not Vulnerable:

Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability

Microsoft Word is prone to a remote stack-based buffer-overflow vulnerability.

Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.

Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Microsoft Word 2003 SP3

• Microsoft Security Update for Word 2003 (KB2878303)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2065136e-7dc7 -4995-81cf-ff9dd472b43e

Microsoft Word File Processing CVE-2014-1758 Remote Stack Buffer Overflow Vulnerability

References:

• Microsoft Word Homepage (Microsoft )
  
• Microsoft Security Bulletin MS14-017 (Microsoft)