CVE-2014-6335

Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory…

published November 11, 2014

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

🚨 A crafty Office document could lead to complete chaos! Remote attackers can execute arbitrary code or crash your system using Microsoft Word 2007 SP3, Word Viewer, and the Compatibility Pack. 🔥 Think of it like a dinner invitation that looks perfect on the surface but actually contains a malicious surprise ingredient. One wrong move with that document and your whole system is in disarray! This vulnerability could result in an attacker taking full control of your system or triggering a denial of service. If exploited, they could read, modify, or delete your data, leaving you in a digital disaster!

Put simply

Think of it like a dinner invitation that looks perfect on the surface but actually contains a malicious surprise ingredient. One wrong move with that document and your whole system is in disarray! The issue arises from memory corruption due to an invalid pointer in crafted Office documents, allowing remote code execution and potential system crashes.

What to do

This vulnerability could result in an attacker taking full control of your system or triggering a denial of service. If exploited, they could read, modify, or delete your data, leaving you in a digital disaster! To safeguard yourself, ensure that all affected Microsoft Office components are updated to the latest versions. Regularly review and follow Microsoft's security updates and guidelines. Don't open suspicious documents from unknown sources! You've got this! Just follow these steps and you’ll be securing your digital fortress in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16038 · 96.9th percentile
Published
2014-11-11T22:00Z
EPSS history
Timeline
  • 11 NOV 22:00Z
    Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory…
    cvelistv5