Schweregrad:: Hoch
  CVE Kennungen:: CVE-2014-1808
  Hinweisdatum: 16 Mai 2014

  Beschreibung

This security update resolves two privately reported vulnerabilities in Microsoft Office. The most severe vulnerability could allow remote code execution if a user opens an Office file that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

  Lösungen

  Betroffene Software und Version:

  • Microsoft Office 2007 Service Pack 3 (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 (32-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (mso)
  • Microsoft Office 2013 (64-bit editions) (proofing tools)
  • Microsoft Office 2010 Service Pack 1 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 2 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 1 (64-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (proofing tools)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (proofing tools)
  • Microsoft Office 2013 (64-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (mso)
  • Microsoft Office 2013 RT (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (mso)
  • Microsoft Office 2013 RT (mso)