9.3
CVSSv2

CVE-2014-1757

Published: 08/04/2014 Updated: 12/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc) format to a newer format, which allows remote malicious users to execute arbitrary code via a crafted document, aka "Microsoft Office File Format Converter Vulnerability."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft word 2010

microsoft office compatibility pack

microsoft word 2007

Github Repositories

iPost test

My-iPost The examples in this repository are based off the case study of the Department of State implementation of iPost The iPost program aggregates and presents a security view of an organization in the form of a dashboard Link to paper: wwwcounciloncybersecurityorg/critical-controls/case-studies/ ipost-sqlitepy - Python script with iPost Risk Scoring formulas