CVE-2014-6334
HighSummary
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.
Risk Assessment
This vulnerability can lead to serious consequences, including system takeover or disruption of service.
Recommendation
It is recommended to update the software to the latest version and implement security measures that restrict the opening of unknown documents.
Other vulnerabilities in Microsoft Word 2007 SP3, Word Viewer, Office Compatibility Pack SP3
See all- CVE-2015-1651High
A use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document.
- CVE-2014-6335High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
- CVE-2014-6333High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Original NVD description (English source)
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Bad Index Remote Code Execution Vulnerability."