CVE-2014-4117

Published: Oct 15, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka "Microsoft Word File Format Vulnerability."

Affected (12)

Products: Microsoft: Office, Office Compatibility Pack, Sharepoint Server, Word, Word Web Apps

Microsoft

5 products

Office

Office Compatibility Pack

Sharepoint Server

Word

Word Web Apps

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2007 sp3
Microsoft Office	Version 2010 sp1
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2011
Microsoft Office Compatibility Pack	All versions
Microsoft Sharepoint Server	Version 2010 sp1
Microsoft Sharepoint Server	Version 2010 sp2
Microsoft Word	Version 2010 sp1
Microsoft Word	Version 2010 sp2
Microsoft Word Web Apps	Version 2010 gold
Microsoft Word Web Apps	Version 2010 sp1
Microsoft Word Web Apps	Version 2010 sp2