CVE-2014-1808 - Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability."

Back Back to CVE browser

MEDIUM

Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability."

Published May 14, 2014

4.3

MEDIUM

CVSS 2.0

EPSS 10.09%

Description

Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1882
Advisory

Link	Providers	Tags
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1882		Advisory