CVE-2014-6335

EUVD-2014-6219 · Published Nov 11, 2014

Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Invalid Pointer Remote Code Execution Vulnerability."

Technologies

Microsoft Office Word ViewerMicrosoft Office Compatibility PackMicrosoft Word

Weaknesses

CWE-94

CVSS scores

v2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

http://secunia.com/advisories/59867
http://www.securityfocus.com/bid/70963
http://www.securitytracker.com/id/1031189
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-069

Potentially impacted assets

See if this affects your attack surface