⚠ Actively exploited
Added to CISA KEV on 2022-02-15. Federal agencies required to patch by 2022-08-15. Required action: Apply updates per vendor instructions..
Severity
7.8HIGH
EPSS
92.6%
top 0.26%
CISA KEV
KEV
Added 2022-02-15
Due 2022-08-15
Exploit
Exploited in wild
Active exploitation observed
Timeline
PublishedMar 25
KEV addedFeb 15
Latest updateMay 14
KEV dueAug 15
CISA Required Action: Apply updates per vendor instructions.

Description

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

Patches

🔴Vulnerability Details

3
GHSA
GHSA-f32r-xw6q-p85m: Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automati2022-05-14
CVEList
CVE-2014-1761: Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automati2014-03-24
VulnCheck
Microsoft Word Memory Corruption Vulnerability2014

💥Exploits & PoCs

1
Exploit-DB
Microsoft Word - RTF Object Confusion (MS14-017) (Metasploit)2014-04-10

📋Vendor Advisories

1
CISA
Microsoft Word Memory Corruption Vulnerability2022-02-15

🕵️Threat Intelligence

4
Talos
CVE-2014-1761, Oh did you mean CVE-2012-2539?2014-04-08
Talos
Microsoft Update Tuesday: April 2014, two final XP and Office 2003 fixes2014-04-08
Talos
CVE-2014-1761, Oh did you mean CVE-2012-2539?2014-04-08
Talos
Microsoft Update Tuesday: April 2014, two final XP and Office 2003 fixes2014-04-08