CVE-2014-0258

Microsoft Word <2003-2007 - Code Injection

Title source: llm
STIX 2.1

Description

Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029599
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029598

Scores

EPSS 0.1556
EPSS Percentile 96.4%

Details

CWE
CWE-119
Status published
Products (4)
microsoft/office_compatibility_pack
microsoft/word 2003 sp3
microsoft/word 2007 sp3
microsoft/word_viewer
Published Jan 15, 2014
Tracked Since Feb 18, 2026