HTTP: Microsoft Office Insecure Library Loading

This signature detects attempts to exploit a known vulnerability against Microsoft Office. A successful attack can lead to arbitrary code execution.

Extended Description

Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Microsoft Office Chinese Grammar Checking Vulnerability."

Affected Products

Microsoft office

References

BugTraq: 46678

CVE: CVE-2014-1756

URL: https://technet.microsoft.com/en-us/library/security/ms14-023 http://technet.microsoft.com/security/bulletin/ms14-023

Short Name

HTTP:MS-OFF-INSC-LIB-LOADNG

Severity

Critical

Recommended

False

Recommended Action

None

HTTP: Microsoft Office Insecure Library Loading

Extended Description

Affected Products

References

Found a potential security threat?