CVE:CVE-2014-6357
CNNVD:CNNVD-201412-254
Microsoft Office等都是美国微软（Microsoft）公司的产品。Office是一款办公软件套件产品，常用组件有Word、Excel、Access、Powerpoint、FrontPage等。Word Viewer是一套免费的Office Word文档查看器。Office Compatibility Pack SP3是一款Office兼容包。
如果Microsoft Word在分析特制Office文件时未正确处理内存中的对象，则会导致远程执行代码漏洞的存在。系统内存可能会由于攻击者可能执行任意代码而受损。以下软件受到影响：Microsoft Office 2010 SP2，Office 2013 Gold和SP1，Office 2013 RT Gold和SP1，Office for Mac 2011，Word Viewer，Office Compatibility Pack SP3，Word Automation Services on SharePoint Server 2010 SP2和2013 Gold及SP1，Office Web Apps 2010 SP2和2013 Gold及SP1。
solution:Upgrade microsoft office to a higher version than 2010:sp2,2011,2013,2013:sp1,and avoid the version 2010:sp2,2011,2013,2013:sp1; Upgrade microsoft office_compatibility_pack to a higher version than *:sp3,and avoid the version *:sp3; Upgrade microsoft sharepoint_server to a higher version than 2010:sp2,2013,2013:sp1,and avoid the version 2010:sp2,2013,2013:sp1; Upgrade microsoft web_applications to a higher version than 2010:sp2,2013,2013:sp1,and avoid the version 2010:sp2,2013,2013:sp1; Upgrade microsoft word_viewer to a higher version than -