Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2014-1761
HistoryMar 25, 2014 - 1:24 p.m.

CVE-2014-1761

2014-03-2513:24:01
CWE-787
microsoft
web.nvd.nist.gov
891
In Wild
cve-2014-1761
microsoft word
remote code execution
memory corruption
rtf
nvd
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.636

Percentile

97.9%

JSON

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.

Affected configurations

Nvd
Node
microsoftofficeMatch2011macos
OR
microsoftoffice_compatibility_packMatch-sp3
OR
microsoftoffice_web_appsMatch2010sp1
OR
microsoftoffice_web_appsMatch2010sp2
OR
microsoftoffice_web_apps_serverMatch2013
OR
microsoftsharepoint_serverMatch2010sp1
OR
microsoftsharepoint_serverMatch2010sp2
OR
microsoftsharepoint_serverMatch2013
OR
microsoftwordMatch2003sp3
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp1
OR
microsoftwordMatch2010sp2
OR
microsoftwordMatch2013-
OR
microsoftwordMatch2013rt
OR
microsoftwordMatch2013sp1-
OR
microsoftwordMatch2013sp1rt
OR
microsoftword_viewerMatch-
VendorProductVersionCPE
microsoftoffice2011cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:*
microsoftoffice_compatibility_pack-cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
microsoftoffice_web_apps2010cpe:2.3:a:microsoft:office_web_apps:2010:sp1:*:*:*:*:*:*
microsoftoffice_web_apps2010cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
microsoftoffice_web_apps_server2013cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*
microsoftsharepoint_server2010cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*
microsoftsharepoint_server2010cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
microsoftsharepoint_server2013cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*
microsoftword2003cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
Rows per page:
1-10 of 171

Related

checkpoint_advisories 3
saint 4
seebug 2
metasploit 1
attackerkb 1
cisa_kev 1
thn 2
openvas 10
securityvulns 2
symantec 1
nessus 3
nvd 1
zdt 1
packetstorm 1
prion 1
exploitdb 1
cvelist 1
carbonblack 1
threatpost 2
mskb 1
fireeye 2
cisa 1
kaspersky 1
myhack58 1
qualysblog 1
checkpoint_advisories
checkpoint_advisories
Microsoft Word RTF listoverridecount Memory Corruption (MS14-017; CVE-2014-1761)
2014-07-16 00:00:00
Microsoft Word RTF listoverridecount Memory Corruption - Ver2 (CVE-2014-1761)
2015-03-26 00:00:00
Microsoft Word RTF listoverridecount Remote Code Execution (MS12-079; CVE-2012-2539; CVE-2014-1761)
2012-12-11 00:00:00
saint
saint
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
Microsoft Word RTF Object Confusion
2014-07-24 00:00:00
seebug
seebug
MS14-017 Microsoft Word RTF Object Confusion
2014-07-01 00:00:00
Microsoft Word RTFζ–‡δ»Άθ§£ζžι”™θ――δ»£η ζ‰§θ‘ŒζΌζ΄ž
2014-03-25 00:00:00
metasploit
metasploit
MS14-017 Microsoft Word RTF Object Confusion
2014-04-08 18:44:20
attackerkb
attackerkb
CVE-2014-1761
2014-03-25 00:00:00
cisa_kev
cisa_kev
Microsoft Word Memory Corruption Vulnerability
2022-02-15 00:00:00
thn
thn
Microsoft Word Zero-Day Vulnerability is being exploited in the Wild
2014-03-24 19:37:00
Microsoft Critical Vulnerabilities that You Must Patch Coming Tuesday
2014-04-05 00:04:00
openvas
openvas
Microsoft Office Web Apps Memory Corruption Vulnerability (2949660)
2014-04-09 00:00:00
Microsoft SharePoint Server WAS Memory Corruption Vulnerability (2949660)
2014-04-09 00:00:00
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)
2014-04-09 00:00:00
securityvulns
securityvulns
Microsoft Office memory corruption
2014-03-25 00:00:00
Microsoft Office multiple security vulnerabilities
2014-05-14 00:00:00
symantec
symantec
Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability
2014-03-24 00:00:00
nessus
nessus
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660) (Mac OS X)
2014-04-08 00:00:00
MS KB2953095: Vulnerability in Microsoft Word Could Allow Remote Code Execution
2014-03-24 00:00:00
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660)
2014-04-08 00:00:00
nvd
nvd
CVE-2014-1761
2014-03-25 13:24:01
zdt
zdt
MS14-017 Microsoft Word RTF Object Confusion Exploit
2014-04-09 00:00:00
packetstorm
packetstorm
MS14-017 Microsoft Word RTF Object Confusion
2014-04-09 00:00:00
prion
prion
Memory corruption
2014-03-25 13:24:00
exploitdb
exploitdb
Microsoft Word - RTF Object Confusion (MS14-017) (Metasploit)
2014-04-10 00:00:00
cvelist
cvelist
CVE-2014-1761
2014-03-24 19:00:00
carbonblack
carbonblack
Threat Analysis: Pylot (Travle) Malware Family
2018-01-26 17:46:11
threatpost
threatpost
Researchers: PlugX More Prominent Than Ever
2015-02-10 09:00:34
Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
2022-02-11 19:57:34
mskb
mskb
MS14-017: Vulnerabilities in Microsoft Word and Office Web Apps could allow remote code execution: April 8, 2014
2014-04-08 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
kaspersky
kaspersky
KLA10616 Multiple vulnerabilities in Microsoft Office
2014-12-09 00:00:00
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.636

Percentile

97.9%

JSON
Related for CVE-2014-1761
checkpoint_advisories3saint4seebug2metasploit1attackerkb1cisa_kev1thn2openvas10securityvulns2symantec1nessus3nvd1zdt1packetstorm1prion1exploitdb1cvelist1carbonblack1threatpost2mskb1fireeye2cisa1kaspersky1myhack581qualysblog1