Vulnerability Details CVE-2014-6356
Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Invalid Index Remote Code Execution Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.227
EPSS Ranking 95.5%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2014-6356
-
cpe:2.3:a:microsoft:office_compatibility_pack:-
-
cpe:2.3:a:microsoft:word:2007
-
cpe:2.3:a:microsoft:word:2010