CVE-2014-6334

Published: Nov 11, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Bad Index Remote Code Execution Vulnerability."

Affected (3)

Products: Microsoft: Office Compatibility Pack, Office Word Viewer, Word

3 products

Office Compatibility Pack

Office Word Viewer

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office Compatibility Pack	All versions
Microsoft Office Word Viewer	All versions
Microsoft Word	Version 2007 sp3

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (8)

http://secunia.com/advisories/59867

Source: secure@microsoft.com

http://www.securityfocus.com/bid/70962

Source: secure@microsoft.com

http://www.securitytracker.com/id/1031189

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-069

Source: secure@microsoft.com

http://secunia.com/advisories/59867

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/70962

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031189

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-069

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.