GCVE-110-CERTCC-2013-882841

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published April 8, 2014

The Microsoft Office file format converter contains a memory corruption vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code with the privileges of the user.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.8remediation_levelOFreport_confidenceCenvironmental_score5.86926702432target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-1757

Transitive aliases

BDU:2014-00008 BDU:2014-00009 BDU:2014-00370 BDU:2014-00366 BDU:2014-00367 CVE-2014-1758 CVE-2014-1761 GSD-2014-1761 GHSA-f32r-xw6q-p85m BDU:2014-00365 BDU:2014-00368 CERTFR-2014-ALE-002 GHSA-pmpx-378r-8j42 GHSA-gcfv-6375-x366 VVD-CISA-2014-1761 BDU:2014-00369

References

Microsoft Office file format converter memory corruption vulnerability

advisory

Microsoft Office file format converter memory corruption vulnerability

advisory

Microsoft Office file format converter memory corruption vulnerability

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON