Microsoft · Word
CVE-2014-1761
Microsoft Word Memory Corruption Vulnerability
O que é
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
CISA: Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 15 de agosto de 2022
Mais falhas exploradas de Microsoft
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 12 de set. de 2023 | Information Disclosure | Word | Média 6,5 | 20% |
| 8 de jun. de 2022 | Malformed Object Pointer | Word | Alto 8,8 | 48% |
| 28 de mar. de 2022 | Remote Code Execution | Word | Alto 7,8 | 53% |
| 13 de out. de 2026 | Command Injection | Windows | Alto 8,8 | 9,8% |
| 25 de set. de 2026 | Code Injection | SharePoint | Alto 8,8 | 8,2% |
| 8 de set. de 2026 | Link Following | Windows | Alto 7,8 | 0,4% |
| 8 de set. de 2026 | Heap-Based Buffer Overflow | Windows | Alto 7,8 | 0,4% |
| 26 de ago. de 2026 | Remote Code Execution | SQL Server | Alto 8,8 | 57% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.