CVE-2014-6360: Code Injection

Published Dec 11, 2014

Updated

Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Global Free Remote Code Execution in Excel Vulnerability."

Affected Software

4 affected components

Microsoft Excel=2007-sp3

Microsoft Excel=2010-sp2

Microsoft Excel X86=2010-sp2

Microsoft Office Compatibility Pack

Event History

Dec 11, 2014

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6360?

CVE-2014-6360 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2014-6360?

To fix CVE-2014-6360, apply the latest security updates provided by Microsoft for Excel 2007 SP3, Excel 2010 SP2, or the Office Compatibility Pack.

Which versions of Microsoft Excel are affected by CVE-2014-6360?

CVE-2014-6360 affects Microsoft Excel 2007 SP3, Excel 2010 SP2, and the Office Compatibility Pack.

Can CVE-2014-6360 be exploited through email attachments?

Yes, CVE-2014-6360 can be exploited through crafted Office documents sent as email attachments.

What are the consequences of exploiting CVE-2014-6360?

Exploiting CVE-2014-6360 could allow attackers to execute arbitrary code on the targeted system.