Trend Micro Security

MS14-023：Microsoft Office の脆弱性により、リモートでコードが実行される (2961037)

2014年5月16日
  危険度: : 高
  CVE識別番号: CVE-2014-1808

  概要

This security update resolves two privately reported vulnerabilities in Microsoft Office. The most severe vulnerability could allow remote code execution if a user opens an Office file that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

  トレンドマイクロの対策

 詳しい情報については以下のサイトをご参照ください。


  対応方法

  影響を受けるソフトウェア

  • Microsoft Office 2007 Service Pack 3 (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 (32-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (mso)
  • Microsoft Office 2013 (64-bit editions) (proofing tools)
  • Microsoft Office 2010 Service Pack 1 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 2 (32-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2010 Service Pack 1 (64-bit editions) (proofing tools) (Simplified Chinese only)
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) (proofing tools)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (proofing tools)
  • Microsoft Office 2013 (64-bit editions) (mso)
  • Microsoft Office 2013 Service Pack 1 (64-bit editions) (mso)
  • Microsoft Office 2013 RT (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (proofing tools)
  • Microsoft Office 2013 RT Service Pack 1 (mso)
  • Microsoft Office 2013 RT (mso)