CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1–1 of 1 advisories (Page 1/1)
2014-03-25
Microsoft Word and Office RTF Memory Corruption Remote Code Execution Vulnerability (CVE-2014-1761) Analysis & Mitigation Guide
[Affected Scope] Microsoft Word 2003 to 2013, Office for Mac 2011, SharePoint Server Word Automation Services, and Office Web Apps.
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) by tricking a user into opening a crafted RTF document.
[Mitigation] Apply the official MS14-017 security patch immediately, or implement File Block policies to disable RTF parsing in Microsoft Word.