CVE-2014-6364

high · 9.3

Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."

9.3

CVSS

14.7%

EPSS (exploit prob.)

97th

EPSS percentile

2014-12-11

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	office	2007
microsoft	office	2010
microsoft	office	2010
microsoft	office	2013
microsoft	office	2013
microsoft	office	2013
microsoft	office	2013
microsoft	office	2013

Check a specific version with /api/v1/cve/match.

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-082
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-082

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-6364