Oval Definition:oval:org.mitre.oval:def:22315
Revision Date:2014-06-30Version:14
Title:Word Memory Corruption Vulnerability (CVE-2014-0259) - MS14-001
Description:Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-0259
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office Compatibility Pack
Microsoft Word 2007
Definition Synopsis
  • word 2007/version
  • Check if the version of winword.exe is less than 12.0.6690.5000
  • AND Microsoft Word 2007 SP3 is installed
  • OR office compatibility pack/version
  • Check if the version of wordcnv.dll is less than 12.0.6690.5000
  • AND Microsoft Office Compatibility Pack SP3 is installed
  • BACK