CVE-2014-1757: Buffer Overflow
Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc) format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office File Format Converter Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1757?
CVE-2014-1757 is considered critical due to its potential for remote code execution.
How do I fix CVE-2014-1757?
To fix CVE-2014-1757, users should apply the latest security updates provided by Microsoft for affected versions of Word and the Office Compatibility Pack.
What versions of Microsoft software are affected by CVE-2014-1757?
CVE-2014-1757 affects Microsoft Word 2007 SP3, 2010 SP1, 2010 SP2, and the Office Compatibility Pack SP3.
What type of attack does CVE-2014-1757 allow?
CVE-2014-1757 allows remote attackers to execute arbitrary code by tricking users into opening a specially crafted document.
Is CVE-2014-1757 still a threat?
While CVE-2014-1757 was a significant threat at the time, applying patches issued by Microsoft mitigates the vulnerabilities it exploited.