CVE-2014-1808 — Sensitive Information Exposure in Microsoft Office

CWE-200 — Sensitive Information ExposureCWE-911 — Improper Update of Reference Count6 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
14.7%
top 5.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Office
Timeline
PublishedMay 14
Latest updateMay 14

Description

Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability."

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-35rf-xg9j-vr62: Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted resp↗2022-05-14
▶

🕵️Threat Intelligence

2
Talos
Microsoft Update Tuesday May 2014: relatively light month↗2014-05-13
▶
Talos
Microsoft Update Tuesday May 2014: relatively light month↗2014-05-13
▶
CVE-2014-1808 — Sensitive Information Exposure | cvebase