CVE-2014-4117
Description
Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka Microsoft Word File Format Vulnerability.
Risk Information
Base Score
7.8
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
32.032
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Security Update for Microsoft Office 2007 suites (KB2883031) | Windows |
| Security Update for Microsoft Office Word 2007 (KB2883032) | Windows |
| Security Update for Microsoft Office 2010 (KB2883008) 32-Bit Edition | Windows |
| Security Update for Microsoft Office 2010 (KB2883008) 64-Bit Edition | Windows |
| Security Update for Microsoft Word 2010 (KB2883013) 32-Bit Edition | Windows |
| Security Update for Microsoft Word 2010 (KB2883013) 64-Bit Edition | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-16281 | Security Update for Microsoft Office 2007 suites (KB2883031) |
| PATCH-16282 | Security Update for Microsoft Office Word 2007 (KB2883032) |
| PATCH-16283 | Security Update for Microsoft Office 2010 (KB2883008) 32-Bit Edition |
| PATCH-16284 | Security Update for Microsoft Office 2010 (KB2883008) 64-Bit Edition |
| PATCH-16285 | Security Update for Microsoft Word 2010 (KB2883013) 32-Bit Edition |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234