CVE-2014-6357

Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office…

published December 11, 2014

CVSS
—
EPSS
19%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ A crafty Office document is your unwitting accomplice! This use-after-free vulnerability lets attackers execute arbitrary code just by slipping in a designed document. 🔥 Think of it like a restaurant where a waiter accidentally serves a dish that was supposed to be thrown away — the moment you take a bite, it could lead to an unexpected and messy disaster! This vulnerability could potentially allow an attacker to take control of your system through a seemingly harmless document. With this power, they could install malware, steal data, or compromise your network. The consequences could be absolutely devastating!

Put simply

Think of it like a restaurant where a waiter accidentally serves a dish that was supposed to be thrown away — the moment you take a bite, it could lead to an unexpected and messy disaster! The use-after-free vulnerability occurs when Microsoft Office improperly manages memory, leading to execution of arbitrary code when a specially crafted document is opened. This flaw affects multiple versions of Office, including 2010 and 2013, and could be exploited with basic user interaction.

What to do

This vulnerability could potentially allow an attacker to take control of your system through a seemingly harmless document. With this power, they could install malware, steal data, or compromise your network. The consequences could be absolutely devastating! To protect yourself, ensure you're using the latest version of Microsoft Office with all security updates installed. It’s also wise to educate users on avoiding suspicious documents. Consider limiting the use of older versions of Office that may still be vulnerable. You've got this! Stay vigilant and keep your software updated to safeguard your systems! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19378 · 97.4th percentile
Published
2014-12-11T00:00Z
EPSS history
Timeline
  • 11 DEC 00:00Z
    Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office…
    cvelistv5