CVEvulnerability

CVE-2014-1756

9.3 HIGH Published 2014-05-14 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-05-14
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Microsoft Office Chinese Grammar Checking Vulnerability."

Affected configurations

• microsoft office 2007 • microsoft office 2010 • microsoft office 2013

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023 docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023 docs.microsoft.com