Gravité: : Élevé
  Identifiant(s) CVE: : CVE-2014-1808
  Date du conseil: 16 mai 2014

  Description

This security update resolves two privately reported vulnerabilities in Microsoft Office. The most severe vulnerability could allow remote code execution if a user opens an Office file that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

  Solutions

  Affected software and version:

  • Microsoft Office 2007 Service Pack 3 (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 (32-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (mso)
  • Microsoft Office 2013 (64-bit editions) (proofing tools)
  • Microsoft Office 2010 Service Pack 1 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 2 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 1 (64-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (proofing tools)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (proofing tools)
  • Microsoft Office 2013 (64-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (mso)
  • Microsoft Office 2013 RT (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (mso)
  • Microsoft Office 2013 RT (mso)