The patch is only one line[1], so if you're scared to update Drupal for fear of breaking things you can just patch the vulnerable part.

In this file:

    includes/database/database.inc

Replace line 739:

    foreach ($data as $i => $value) {

With the patched code:

    foreach (array_values($data) as $i => $value) {

[1] https://www.drupal.org/files/issues/SA-CORE-2014-005-D7.patc...