Oval Definition:oval:org.mitre.oval:def:27446
Revision Date:2015-01-26Version:14
Title:Excel invalid pointer remote code execution vulnerability - CVE-2014-6361 (MS14-083)
Description:Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Excel Invalid Pointer Remote Code Execution Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-6361
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Excel 2007
Microsoft Excel 2010
Microsoft Excel 2013
Microsoft Office Compatibility Pack
Definition Synopsis
  • office excel 2007/versions
  • Check if the version of excel.exe is less than 12.0.6712.5000
  • AND Microsoft Excel 2007 is installed
  • OR office excel 2010/versions
  • Check if the version of excel.exe is less than 14.0.7140.5000
  • AND Microsoft Excel 2010 is installed
  • OR office excel 2013/versions
  • Check if the version of excel.exe is less than 15.0.4675.1000
  • AND Microsoft Excel 2013 is installed
  • OR compatibility pack/versions
  • Check if the version of excelcnv.exe is less than 12.0.6713.5000
  • AND Microsoft Office Compatibility Pack is installed
  • BACK