CVE-2014-6362

Published: Feb 11, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."

Affected (5)

Products: Microsoft: Office

Microsoft

1 product

Office

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2007 sp3
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2013
Microsoft Office	Version 2013 sp1

References (6)

http://www.securityfocus.com/bid/72467

Source: secure@microsoft.com

http://www.securitytracker.com/id/1031721

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-013

Source: secure@microsoft.com

http://www.securityfocus.com/bid/72467

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031721

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-013

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.