Lucene search

K
mskbMicrosoftKB3000434
HistoryOct 14, 2014 - 12:00 a.m.

MS14-061: Vulnerability in Microsoft Word and Office Web Apps could allow remote code execution: October 14, 2014

2014-10-1400:00:00
Microsoft
support.microsoft.com
23

0.823 High

EPSS

Percentile

98.4%

<html><body><p>This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.</p><h2>INTRODUCTION</h2><div>Microsoft has released security bulletin MS14-061. To learn more about this security bulletin:<br /><ul><li>Home users:<br /><div><a href=“https://www.microsoft.com/security/pc-security/updates.aspx” target=“_self”>https://www.microsoft.com/security/pc-security/updates.aspx</a></div><span>Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update website now:<br /><div><a href=“https://update.microsoft.com/microsoftupdate/” target=“_self”>https://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals:<br /><div><a href=“https://technet.microsoft.com/library/security/ms14-061” target=“_self”>https://technet.microsoft.com/library/security/MS14-061</a></div></li></ul><h3>How to obtain help and support for this security update</h3>Help installing updates:<br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals:<br /><a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security troubleshooting and support</a><br /><br />Help protect your Windows-based computer from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country:<br /><a href=“https://support.microsoft.com/common/international.aspx” target=“_self”>International support</a><br /><br /></div><h2>More Information</h2><div><h3>Additional information about this security update</h3>The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.<br /><ul><li><div><a href=“https://support.microsoft.com/en-us/help/2883008”>2883008 </a> MS14-061: Description of the security update for Office 2010: October 14, 2014 </div></li><li><div><a href=“https://support.microsoft.com/en-us/help/2883013”>2883013 </a> MS14-061: Description of the security update for Microsoft Word 2010: October 14, 2014</div></li><li><div><a href=“https://support.microsoft.com/en-us/help/2883031”>2883031 </a> MS14-061: Description of the security update for Microsoft Office 2007: October 14, 2014 </div></li><li><div><a href=“https://support.microsoft.com/en-us/help/2883098”>2883098 </a> MS14-061: Description of the security update for Microsoft SharePoint Server 2010: October 14, 2014 </div></li><li><div><a href=“https://support.microsoft.com/en-us/help/2883032”>2883032 </a> MS14-061: Description of the security update for Microsoft Word 2007: October 14, 2014 </div></li><li><div><a href=“https://support.microsoft.com/en-us/help/2889827”>2889827 </a> MS14-061: Description of the security update for Microsoft Office Web Apps Server 2010: October 14, 2014 </div></li><li><div><a href=“https://support.microsoft.com/en-us/help/3004865”>3004865 </a> Description of the Microsoft Office for Mac 2011 14.4.5 Update: October 14, 2014 </div></li></ul></div><h2>FILE INFORMATION</h2><div><div><div><div><span><span></span></span><span><span>File hash information</span></span></div><div><span><div><div><table><tr><th>File name</th><th>SHA1 hash</th><th>SHA256 hash</th></tr><tr><td>kb24286772010-kb2883008-fullfile-x64-glb.exe</td><td>F542585DD106FF635760F649631205387D145207</td><td>C30948B9D32AC5E742C345479045CD168CFDA230FBDC945ECC3EAC5428B89E7D</td></tr><tr><td>kb24286772010-kb2883008-fullfile-x86-glb.exe</td><td>04C0BA9B2B7EECB8D5998F5DFD4D7277A0F97AFA</td><td>58B200F75A955CA8E54BA94FFB76781B7FA90E1488883914382B865301A6D49D</td></tr><tr><td>wac2010-kb2889827-fullfile-x64-glb.exe</td><td>E4BB085CF36EF3E5628A0B070CBFB657611B0B5F</td><td>5CFAEC19194DE0F3915A802A4F64C46FBC8035D7C30AF824963BEC4B9ABFE571</td></tr><tr><td>wdsrv2010-kb2883098-fullfile-x64-glb.exe</td><td>24EF22FF0CC42BEA7064D8840AB55AFE2D68750E</td><td>8B80D4B202828D4A7415DB4E56A6998818DAAC742230FB9B12E87328D652C928</td></tr><tr><td>word2007-kb2883032-fullfile-x86-glb.exe</td><td>BC86CE6F3F9A7146A1F0244C7C7982E1B75F0B04</td><td>4986407E4F8A6E58DD4D7667B1EA02C93C87C54B171E91685B8EED8625C389C6</td></tr><tr><td>word2010-kb2883013-fullfile-x64-glb.exe</td><td>138EA1623D3903C48D2B73EEAACC8D9F58D4D2E1</td><td>6B0C8E654B1C72C45680CEC8559392D840A53073F92CCBD251847B3EBA4AB04F</td></tr><tr><td>word2010-kb2883013-fullfile-x86-glb.exe</td><td>7AAFC537FD9C43053F4E9291033C90E25FE87250</td><td>BF4C71B71ECF8A960ADCEB9C96FA284BB29D5D0CCE9C79BBFA74B0DFC98156C9</td></tr><tr><td>wordconv2007-kb2883031-fullfile-x86-glb.exe</td><td>27BC23547D23CD9368C848C4A4FB65EF3E09651E</td><td>3B9ADBB383D28A172DF4972AEC96AD87E4A8E1090BD5D5B14D5326078F8871AF</td></tr></table></div></div><br /></span></div></div></div></div></body></html>