Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2014-6352
HistoryFeb 25, 2022 - 12:00 a.m.

Microsoft Windows Code Injection Vulnerability

2022-02-2500:00:00
CISA
www.cisa.gov
6
microsoft windows
code injection
remote attackers
arbitrary code
ole object

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.949

Percentile

99.3%

JSON

Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.

Related

exploitpack 2
zdt 2
packetstorm 2
nessus 2
prion 1
nvd 1
symantec 1
cvelist 1
seebug 1
cve 1
cisa 2
attackerkb 2
metasploit 2
exploitdb 6
threatpost 3
thn 2
mskb 1
checkpoint_advisories 2
openvas 1
securityvulns 1
myhack58 1
kaspersky 1
exploitpack
exploitpack
Microsoft Office 20072010 - OLE Arbitrary Command Execution
2014-11-12 00:00:00
Microsoft-Office-2007-and-2010---OLE-Arbitrary-Command-Execution
2015-01-04 16:00:19
zdt
zdt
MS Office 2007 and 2010 - OLE Arbitrary Command Execution Exploit
2014-11-12 00:00:00
MS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
2014-11-16 00:00:00
packetstorm
packetstorm
MS14-064 Microsoft Windows OLE Package Manager Code Execution
2014-11-13 00:00:00
MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python
2014-11-14 00:00:00
nessus
nessus
MS KB3010060: Vulnerability in Microsoft OLE Could Allow Remote Code Execution (deprecated)
2014-10-22 00:00:00
MS14-064: Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443)
2014-11-11 00:00:00
prion
prion
Code injection
2014-10-22 14:55:00
nvd
nvd
CVE-2014-6352
2014-10-22 14:55:06
symantec
symantec
Microsoft Windows CVE-2014-6352 OLE Remote Code Execution Vulnerability
2014-10-21 00:00:00
cvelist
cvelist
CVE-2014-6352
2014-10-22 14:00:00
seebug
seebug
MS Office 2007 and 2010 - OLE Arbitrary Command Execution
2014-11-13 00:00:00
cve
cve
CVE-2014-6352
2014-10-22 14:55:06
cisa
cisa
Microsoft Releases Advisory for Unpatched Windows Vulnerability
2014-10-22 00:00:00
CISA Adds Four Known Exploited Vulnerabilities to Catalog
2022-02-25 00:00:00
attackerkb
attackerkb
CVE-2014-6352
2014-10-22 00:00:00
Microsoft Internet Explorer Use-After-Free Vulnerability
2014-10-15 00:00:00
metasploit
metasploit
MS14-064 Microsoft Windows OLE Package Manager Code Execution
2014-11-12 07:10:49
MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python
2014-11-13 06:56:10
exploitdb
exploitdb
Microsoft Windows - OLE Package Manager Code Execution (via Python) (MS14-064) (Metasploit)
2014-11-14 00:00:00
Microsoft Windows - OLE Package Manager Code Execution (MS14-064) (Metasploit)
2014-11-14 00:00:00
Microsoft Office 2007/2010 - OLE Arbitrary Command Execution
2014-11-12 00:00:00
threatpost
threatpost
'Dropping Elephant' APT Attackers Targets Old Windows Flaws
2016-07-08 11:04:30
November 2014 Microsoft Patch Tuesday Security Bulletins
2014-11-11 14:07:38
Sofacy APT28 Gang Using New Backdoors, Zero Days
2015-12-04 07:05:37
thn
thn
Microsoft PowerPoint Vulnerable to Zero-Day Attack
2014-10-22 00:54:00
CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog
2022-03-01 04:37:00
mskb
mskb
MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014
2014-11-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows OLE Remote Code Execution (MS14-060; CVE-2014-4114; CVE-2014-6352)
2014-10-14 00:00:00
Microsoft Windows OLE Remote Code Execution (MS14-060) - ver 2 (CVE-2014-4114; CVE-2014-6352)
2014-10-19 00:00:00
openvas
openvas
Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)
2014-11-12 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.949

Percentile

99.3%

JSON
Related for CISA-KEV-CVE-2014-6352
exploitpack2zdt2packetstorm2nessus2prion1nvd1symantec1cvelist1seebug1cve1cisa2attackerkb2metasploit2exploitdb6threatpost3thn2mskb1checkpoint_advisories2openvas1securityvulns1myhack581kaspersky1