CVE-2014-1809

medium · 6.8

The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka "MSCOMCTL ASLR Vulnerability."

6.8

CVSS

10.1%

EPSS (exploit prob.)

95th

EPSS percentile

2014-05-14

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
microsoft	office	2007
microsoft	office	2010
microsoft	office	2010
microsoft	office	2010
microsoft	office	2010
microsoft	office	2013
microsoft	office	2013

Check a specific version with /api/v1/cve/match.

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-1809