CVE-2014-6361: Code Injection

Published Dec 11, 2014

Updated

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Excel Invalid Pointer Remote Code Execution Vulnerability."

Affected Software

6 affected components

Microsoft Excel=2007-sp3

Microsoft Excel=2010-sp2

Microsoft Excel X86=2010-sp2

Microsoft Excel=2013

Microsoft Excel=2013-sp1

Microsoft Office Compatibility Pack

Event History

Dec 11, 2014

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6361?

CVE-2014-6361 has a critical severity rating, as it allows remote execution of arbitrary code.

How do I fix CVE-2014-6361?

To fix CVE-2014-6361, apply the Microsoft security updates released as part of MS14-083.

What software versions are affected by CVE-2014-6361?

CVE-2014-6361 affects Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, and the Office Compatibility Pack.

What type of attack does CVE-2014-6361 enable?

CVE-2014-6361 enables remote attackers to execute arbitrary code via crafted Office documents.

Does CVE-2014-6361 affect Excel on Mac?

Yes, CVE-2014-6361 affects Microsoft Excel for Mac versions 2007 SP3, 2010 SP2, and 2013.