CVE-2014-1761: microsoft office +6 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2014-1761

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 77,7%

Kerentanan Out-of-bounds Write pada microsoft office, microsoft office compatibility pack +5 lainnya. Skor CVSS 3.1 7.8 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 15 Februari 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.

Rincian

Terbit di NVD: 25 Maret 2014
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-787: Out-of-bounds Write
EPSS (30 hari): 77,7% peluang dieksploitasi; lebih tinggi dari 99,5% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Microsoft Word Memory Corruption Vulnerability
Masuk KEV: 15 Februari 2022
Tenggat CISA: 15 Agustus 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
microsoft	office	Versi 2011
microsoft	office compatibility pack	Semua versi
microsoft	office web apps	Versi 2010 sp1
microsoft	office web apps	Versi 2010 sp2
microsoft	office web apps server	Versi 2013
microsoft	sharepoint server	Versi 2010 sp1
microsoft	sharepoint server	Versi 2010 sp2
microsoft	sharepoint server	Versi 2013
microsoft	word	Versi 2003 sp3
microsoft	word	Versi 2007 sp3
microsoft	word	Versi 2010 sp1
microsoft	word	Versi 2010 sp2
microsoft	word	Versi 2013
microsoft	word	Versi 2013 sp1
microsoft	word viewer	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://technet.microsoft.com/security/advisory/2953095 patch · advisory vendor
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 patch · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-1761 pemerintah AS

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.