CVE-2014-6364

Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."

Score

CVSS 2.0 9.3 Critical

Status

Modified - secure@microsoft.com

Published

2014-12-11

Last modified

2024-08-06

Affected products

• Office (Microsoft)

References

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-082