ID de Prueba:	1.3.6.1.4.1.25623.1.0.804423
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Office Word Remote Code Execution Vulnerabilities (2949660)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS14-017.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS14-017. Vulnerability Insight: Multiple flaws are due to an error within, - Microsoft Word when handling certain RTF-formatted data can be exploited to corrupt memory. - Microsoft Office File Format Converter when handling certain files can be exploited to corrupt memory. - Microsoft Word when handling certain files can be exploited to cause a stack-based buffer overflow. Vulnerability Impact: Successful exploitation will allow remote attackers to execute the arbitrary code, cause memory corruption and compromise the system. Affected Software/OS: - Microsoft Word 2013 - Microsoft Word 2003 Service Pack 3 and prior - Microsoft Word 2007 Service Pack 3 and prior - Microsoft Word 2010 Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1757 CERT/CC vulnerability note: VU#882841 http://www.kb.cert.org/vuls/id/882841 Microsoft Security Bulletin: MS14-017 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 Common Vulnerability Exposure (CVE) ID: CVE-2014-1758 Common Vulnerability Exposure (CVE) ID: CVE-2014-1761
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.