فا

‫ Microsoft Word / Office Web Apps Office File Parsing Two Arbitrary Code Execution Vulnerabilities

ID: IRCAD2014123675
Release Date: 2014-12-09
Criticality level: Highly critical
Software:
Microsoft Office 2007
Microsoft Office 2010
Microsoft Office 2013
Microsoft Office 2013 RT
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office for Mac 2011
Microsoft Office Web Apps
Microsoft Office Word 2007
Microsoft Office Word Viewer
Microsoft SharePoint Server 2010
Microsoft SharePoint Server 2013
Microsoft Word 2010
Microsoft Word 2013
Microsoft Word 2013 RT
Description:
Two vulnerabilities have been reported in Microsoft Word and Microsoft Office Web Apps, which can be exploited by malicious people to compromise a vulnerable system.
1) An invalid indexing error when parsing Office files can be exploited to execute arbitrary code via a specially crafted Office file.
2) A use-after-free error when parsing Office files can be exploited to execute arbitrary code via a specially crafted Office file.
Solution
Apply updates.
References:
MS14-081 (KB3017301, KB2920793, KB2899518, KB2899519, KB2910916, KB3018888, KB2920729, KB2920792, KB2899581, KB2883050, KB2910892, KB2889851)
Secunia:
 
 

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 21 آذر 1393

امتیاز

امتیاز شما
تعداد امتیازها: 0