RCE in Microsoft Office_compatibility_pack
CVE-2014-6335
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Invalid Pointer…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.460 (97.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office_compatibility_pack
- Microsoft Office_word_viewer
- Microsoft Word — versions 2007
- N/a — versions n/a