There are multiple attack scenarios, as outlined by Microsoft’s security bulletin: Microsoft further explained that exploitation of CVE-2014-6357 requires that a user opens a specially crafted file with an affected version of Microsoft Office software. Office 2011 14.4.7 Update patches the following vulnerability:ĬVE-2014-6357 : Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP Gold and SP1, and Office Web Apps 2010 SP Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka “Use After Free Word Remote Code Execution Vulnerability.”

The Office for Mac update applies to the following Microsoft software: Office 2011, Office 2011 Home and Business Edition, Word 2011, Excel 2011, PowerPoint 2011, Outlook 2011, Office for Mac Standard 2011 Edition, Microsoft Office for Mac Home & Student 2011, and Microsoft Office for Mac Academic 2011. Microsoft has released Office 2011 14.4.7 Update for Mac OS X version 10.5.8 or later. These updates improve the security of Microsoft software with fixes for a vulnerability that an attacker can use to overwrite the contents of an affected computer’s memory with malicious code. Security News Microsoft Office 2011 14.4.7 Update Patches Critical Vulnerability

Ms office mac 2011 upgrade