GCVE - cpe:2.3:a:microsoft:word:2010:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:word:2010:sp1:*:*:*:*:*:*

part: a version: 2010 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Word (`fed6abb9-31ef-57e0-8892-46b0e83ba7d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-4117`	vulnerable	2026-06-08 05:05:44.264882	Details available Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka "Microsoft Word File Format Vulnerability." Published: 2014-10-15T10:00:00.000Z Updated: 2024-08-06T11:04:28.492Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/70360 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-061 http://secunia.com/advisories/60973	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1761`	vulnerable	2026-06-08 05:05:26.297506	Details available Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014. Published: 2014-03-24T19:00:00.000Z Updated: 2025-10-22T00:05:38.376Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 http://technet.microsoft.com/security/advisory/2953095	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1757`	vulnerable	2026-06-08 05:05:26.287031	Details available Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc) format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office File Format Converter Vulnerability." Published: 2014-04-08T21:00:00.000Z Updated: 2024-08-06T09:50:11.368Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 http://www.kb.cert.org/vuls/id/882841	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0260`	vulnerable	2026-06-08 05:05:12.505127	Details available Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Published: 2014-01-15T02:00:00.000Z Updated: 2024-08-06T09:13:09.318Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1029599 http://www.securitytracker.com/id/1029598 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3852`	vulnerable	2026-06-08 05:04:33.028107	Details available Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability." Published: 2013-09-11T10:00:00.000Z Updated: 2024-08-06T16:22:01.479Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18635 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-072 http://www.us-cert.gov/ncas/alerts/TA13-253A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3850`	vulnerable	2026-06-08 05:04:33.025232	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3849`	vulnerable	2026-06-08 05:04:33.022323	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3848`	vulnerable	2026-06-08 05:04:33.021844	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3847`	vulnerable	2026-06-08 05:04:33.021275	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2539`	vulnerable	2026-06-08 05:02:04.790609	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2528`	vulnerable	2026-06-08 05:02:04.766637	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.