Vulnerability in Microsoft Office
CVE-2014-6362
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."
EPSS: 0.162 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office — versions 2007, 2010, 2013
- N/a — versions n/a
References
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)