CVE-2014-1809: Medium severity Microsoft Office vulnerability
The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka "MSCOMCTL ASLR Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1809?
CVE-2014-1809 is classified as a critical vulnerability allowing attackers to bypass Address Space Layout Randomization (ASLR).
How do I fix CVE-2014-1809?
To fix CVE-2014-1809, users should apply the relevant security updates provided by Microsoft for affected versions of Microsoft Office.
What versions of Microsoft Office are affected by CVE-2014-1809?
CVE-2014-1809 affects Microsoft Office 2007 SP3, 2010 SP1, 2010 SP2, and 2013 versions including SP1.
What kind of attacks can exploit CVE-2014-1809?
CVE-2014-1809 can be exploited via crafted websites designed to specifically target the vulnerability in affected Microsoft Office versions.
Is CVE-2014-1809 being actively exploited?
Yes, CVE-2014-1809 was actively exploited in the wild as of May 2014.