Lucene search
MicrosoftCVE-2014-6356HistoryDec 11, 2014 - 12:59 a.m.
CVE-2014-6356
2014-12-1100:59:09
CWE-94
microsoft
web.nvd.nist.gov
31
cve-2014-6356
microsoft word
remote code execution
office document
security vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.176
Percentile
96.2%
Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka “Invalid Index Remote Code Execution Vulnerability.”
Affected configurations
Node
microsoftoffice_compatibility_packsp3
ORmicrosoftwordMatch2007sp3
ORmicrosoftwordMatch2010sp2
Related
nvd
nvd
CVE-2014-6356
2014-12-11 00:59:09
symantec
symantec
Microsoft Office Invalid Index CVE-2014-6356 Memory Corruption Vulnerability
2014-12-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Index Remote Code Execution (MS14-081; CVE-2014-6356)
2014-12-09 00:00:00
cvelist
cvelist
CVE-2014-6356
2014-12-11 00:00:00
prion
prion
Remote code execution
2014-12-11 00:59:00
openvas
openvas
Microsoft Office Word Remote Code Execution Vulnerabilities (3017301)
2014-12-10 00:00:00
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3017301)
2014-12-10 00:00:00
Microsoft Office Web Apps Remote Code Execution Vulnerabilities (3017301)
2014-12-10 00:00:00
nessus
nessus
mskb
mskb
securityvulns
securityvulns
Microsoft Office multiple security vulnerabilities
2015-01-14 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.176
Percentile
96.2%
Related for CVE-2014-6356