This host is missing a critical security update according to Microsoft Bulletin MS14-081.

Successful exploitation will allow remote attackers to execute the arbitrary code, cause memory corruption and compromise the system. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, https://technet.microsoft.com/library/security/MS14-081

The flaws are due to, - An invalid indexing error when parsing Office files can be exploited to execute arbitrary code via a specially crafted Office file. - A use-after-free error when parsing Office files can be exploited to execute arbitrary code via a specially crafted Office file.

Microsoft Office Compatibility Pack SP3 and prior.

Get the vulnerable file version and check appropriate patch is applied or not.

• http://secunia.com/advisories/61149
• https://support.microsoft.com/kb/2920792
• https://support.microsoft.com/kb/3017301
• https://technet.microsoft.com/library/security/MS14-081

---

Updated on 2015-03-25