Improper input validation in Microsoft Office
CVE-2014-4117
Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.320 (96.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office — versions 2007, 2010, 2011
- Microsoft Office_compatibility_pack
- Microsoft Sharepoint_server — versions 2010
- Microsoft Word — versions 2010
- Microsoft Word_web_apps — versions 2010
- N/a — versions n/a