### [CVE-2014-1761](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1761) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014. ### POC #### Reference No PoCs from references. #### Github - https://github.com/2lambda123/panopticon-unattributed - https://github.com/Ostorlab/KEV - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors - https://github.com/Panopticon-Project/panopticon-unattributed - https://github.com/c3isecurity/My-iPost - https://github.com/houjingyi233/office-exploit-case-study - https://github.com/qiantu88/office-cve