Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
| Summary | |
|---|---|
| Title | Vulnerability in Microsoft Word Could Allow Remote Code Execution |
| Informations | |||
|---|---|---|---|
| Name | KB2953095 | First vendor Publication | 2014-03-24 |
| Vendor | Microsoft | Last vendor Modification | 2014-04-08 |
| Severity (Vendor) | N/A | Revision | 2.0 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.3 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS14-017 to address this issue. For more information about this issue, including download links for an available security update, please review MS14-017. The vulnerability addressed is the Word RTF Memory Corruption Vulnerability - CVE-2014-1761. |
Original Source
| Url : http://www.microsoft.com/technet/security/advisory/2953095.mspx |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-787 | Out-of-bounds Write (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:23983 | |||
| Oval ID: | oval:org.mitre.oval:def:23983 | ||
| Title: | Word RTF memory corruption vulnerability (CVE-2014-1761) - MS14-017 | ||
| Description: | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2014-1761 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP | Product(s): | Microsoft Office Compatibility Pack Microsoft Word 2003 Microsoft Word 2007 Microsoft Word 2010 Microsoft Word 2013 Microsoft Word Viewer Microsoft Office Web Apps 2010 Microsoft Office Web Apps Server 2013 Microsoft SharePoint Server 2010 Microsoft SharePoint Server 2013 |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:24472 | |||
| Oval ID: | oval:org.mitre.oval:def:24472 | ||
| Title: | Vulnerabilities in Microsoft Word could allow remote code execution (CVE-2014-1761) - MS14-017 | ||
| Description: | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014. | ||
| Family: | macos | Class: | vulnerability |
| Reference(s): | CVE-2014-1761 | Version: | 3 |
| Platform(s): | Apple Mac OS X Apple Mac OS X Server | Product(s): | Microsoft Office 2011 for Mac |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 1 | |
| Application | 2 | |
| Application | 1 | |
| Application | 3 | |
| Application |
| 8 |
| Application | 1 |
SAINT Exploits
| Description | Link |
|---|---|
| Microsoft Word RTF Object Confusion | More info here |
ExploitDB Exploits
| id | Description |
|---|---|
| 2014-04-10 | MS14-017 Microsoft Word RTF Object Confusion |
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2014-04-10 | IAVM : 2014-A-0049 - Multiple Vulnerabilities in Microsoft Office Severity : Category II - VMSKEY : V0048675 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Office Word rtf invalid listoverridecount value attempt RuleID : 24975 - Revision : 12 - Type : FILE-OFFICE |
| 2014-01-10 | Microsoft Office Word rtf invalid listoverridecount value attempt RuleID : 24974 - Revision : 12 - Type : FILE-OFFICE |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-04-08 | Name : An application installed on the remote Mac OS X host is affected by a remote ... File : macosx_ms14-017.nasl - Type : ACT_GATHER_INFO |
| 2014-04-08 | Name : The remote host is affected by multiple memory corruption vulnerabilities. File : smb_nt_ms14-017.nasl - Type : ACT_GATHER_INFO |
| 2014-03-24 | Name : The remote Windows host is affected by a remote code execution vulnerability. File : smb_kb2953095.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-04-24 21:21:57 |
|
| 2014-04-08 21:20:15 |
|
| 2014-03-27 21:19:29 |
|
| 2014-03-25 21:25:19 |
|
| 2014-03-25 13:21:18 |
|
| 2014-03-24 21:20:29 |
|
