Vulnerability in Microsoft Office
CVE-2014-6364
Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."
EPSS: 0.147 (96.3th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office — versions 2007, 2010, 2013
- N/a — versions n/a
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)