CVE-2014-1808: Infoleak
Published May 14, 2014
·Updated
Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability."
Affected Software
2 affected components
Microsoft Office=2013
Microsoft Office=2013-sp1
Event History
May 14, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:13 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1808?
CVE-2014-1808 is classified as important, indicating that it poses a significant risk.
2
How do I fix CVE-2014-1808?
To mitigate CVE-2014-1808, apply the latest security updates released by Microsoft for Office 2013.
3
What does CVE-2014-1808 exploit?
CVE-2014-1808 exploits a token reuse vulnerability allowing remote attackers to obtain sensitive token information.
4
Which versions of Microsoft Office are affected by CVE-2014-1808?
CVE-2014-1808 affects Microsoft Office 2013, including its SP1 and RT versions.
5
What can remote attackers do through CVE-2014-1808?
Remote attackers can obtain sensitive token information by delivering a crafted response when an Office document is opened.