CVE-2014-6335
HighSummary
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of organizational systems and user data.
Recommendation
It is recommended to update the software to the latest versions and to avoid opening suspicious Office documents.
Other vulnerabilities in Microsoft Word 2007 SP3, Word Viewer, Office Compatibility Pack SP3
See all- CVE-2015-1651High
A use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document.
- CVE-2014-6334High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.
- CVE-2014-6333High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Original NVD description (English source)
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Invalid Pointer Remote Code Execution Vulnerability."