Gravedad: High
  Identificadores de CVE : CVE-2014-1808
  Fecha recomendada: 16 de mayo de 2014

  Descripción

This security update resolves two privately reported vulnerabilities in Microsoft Office. The most severe vulnerability could allow remote code execution if a user opens an Office file that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

  Soluciones

  Software y versión afectados

  • Microsoft Office 2007 Service Pack 3 (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 (32-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (mso)
  • Microsoft Office 2013 (64-bit editions) (proofing tools)
  • Microsoft Office 2010 Service Pack 1 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 2 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 1 (64-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (proofing tools)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (proofing tools)
  • Microsoft Office 2013 (64-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (mso)
  • Microsoft Office 2013 RT (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (mso)
  • Microsoft Office 2013 RT (mso)