Vulnerability Details : CVE-2014-1761
Public exploit exists!
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
Vulnerability category: Memory CorruptionExecute codeDenial of service
Products affected by CVE-2014-1761
- cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:*
- cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2010:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2013:*:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:word:2013:sp1:*:*:-:*:*:*
- cpe:2.3:a:microsoft:word:2013:*:*:*:-:*:*:*
- cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_web_apps:2010:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*
CVE-2014-1761 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:
Microsoft Word Memory Corruption Vulnerability
CISA required action:
Apply updates per vendor instructions.
CISA description:
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
Notes:
https://nvd.nist.gov/vuln/detail/CVE-2014-1761
Added on
2022-02-15
Action due date
2022-08-15
Exploit prediction scoring system (EPSS) score for CVE-2014-1761
57.47%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2014-1761
-
MS14-017 Microsoft Word RTF Object Confusion
Disclosure Date: 2014-04-01First seen: 2020-04-26exploit/windows/fileformat/ms14_017_rtfThis module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how a listoverridecount field can be modified to treat one structure as another. This bug was originally seen b
CVSS scores for CVE-2014-1761
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | 2024-07-24 |
CWE ids for CVE-2014-1761
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-1761
-
http://technet.microsoft.com/security/advisory/2953095
Microsoft Security Advisory 2953095 | Microsoft DocsPatch;Vendor Advisory
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017
Microsoft Security Bulletin MS14-017 - Critical | Microsoft DocsPatch;Vendor Advisory
Jump to