Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-6332
HistoryNov 11, 2014 - 10:55 p.m.

CVE-2014-6332

2014-11-1122:55:05
CWE-119
[email protected]
web.nvd.nist.gov
1107
In Wild
2
cve-2014-6332
ole
microsoft
windows
server 2003
vista
server 2008
windows 7
windows 8
windows 8.1
server 2012
windows rt
remote code execution
vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka “Windows OLE Automation Array Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7Match-sp1
OR
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rtMatch-
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1itanium
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_vistaMatch-sp2

References

Social References

More

Related

fireeye 14
zdt 8
cert 1
metasploit 1
vulnerlab 2
exploitdb 3
packetstorm 13
saint 4
exploitpack 3
prion 1
seebug 2
checkpoint_advisories 2
securityvulns 2
canvas 1
symantec 1
attackerkb 1
cisa_kev 1
nvd 1
threatpost 6
cvelist 1
openvas 1
mskb 1
nessus 1
securelist 2
malwarebytes 1
mmpc 1
thn 2
myhack58 1
kaspersky 1
fireeye
fireeye
Threat actors leverage EternalBlue exploit to deliver non-WannaCry payloads
2017-06-02 09:00:00
Threat actors leverage EternalBlue exploit to deliver non-WannaCry payloads
2017-06-02 09:00:00
GongDa vs. Korean News
2016-03-18 08:30:00
zdt
zdt
Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution Exploit
2014-12-01 00:00:00
Internet Download Manager - OLE Automation Array Remote Code Execution Exploit
2015-07-21 00:00:00
The World Browser 3.0 Final - Remote Code Execution Exploit
2015-10-22 00:00:00
cert
cert
Microsoft Windows Object Linking and Embedding (OLE) OleAut32 library SafeArrayRedim function vulnerable to remote code execution via Internet Explorer
2014-11-13 00:00:00
metasploit
metasploit
MS14-064 Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution
2014-11-24 07:25:18
vulnerlab
vulnerlab
MS HTA (HTML Application) - Code Execution (MS14-064)
2015-08-15 00:00:00
MS HTA (HTML Application) - Code Execution (MS14-064)
2015-08-15 00:00:00
exploitdb
exploitdb
IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution
2015-06-01 00:00:00
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (1)
2014-11-13 00:00:00
Microsoft Internet Explorer < 11 - OLE Automation Array Remote Code Execution (Metasploit)
2014-11-13 00:00:00
packetstorm
packetstorm
Havij OLE Automation Array Remote Code Execution
2015-06-26 00:00:00
IBM Security AppScan 9.0.2 Remote Code Execution
2015-06-01 00:00:00
Winamp Bento Browser Remote Code Execution
2015-10-26 00:00:00
saint
saint
Windows OLE Automation Array command execution
2014-11-17 00:00:00
Windows OLE Automation Array command execution
2014-11-17 00:00:00
Windows OLE Automation Array command execution
2014-11-17 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (1)
2014-11-13 00:00:00
IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution
2015-06-01 00:00:00
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (Metasploit)
2014-11-13 00:00:00
prion
prion
Remote code execution
2014-11-11 22:55:00
seebug
seebug
IE Godmode remote code execution vulnerability, CVE-2014-6332）
2017-03-06 00:00:00
IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution
2015-08-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)
2014-11-11 00:00:00
Microsoft Windows OLE Obfuscated Automation Array Remote Code Execution (CVE-2014-6332)
2019-02-14 00:00:00
securityvulns
securityvulns
Microsoft HTA &#40;HTML Application&#41; - Remote Code Execution Vulnerability &#40;MS14-064&#41;
2015-08-24 00:00:00
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00
canvas
canvas
Immunity Canvas: MS14_064_IE_OLEAUT32
2014-11-11 22:55:00
symantec
symantec
Microsoft Windows CVE-2014-6332 OLE Remote Code Execution Vulnerability
2014-11-11 00:00:00
attackerkb
attackerkb
CVE-2014-6332
2014-11-11 00:00:00
cisa_kev
cisa_kev
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
2022-03-25 00:00:00
nvd
nvd
CVE-2014-6332
2014-11-11 22:55:05
threatpost
threatpost
EternalBlue Exploit Spreading Gh0st RAT, Nitol
2017-06-02 14:32:11
Angler Exploit Kit, Bedep Malware Inflating Video Views
2015-05-05 08:00:41
Malvertising Campaign Redirects Browsers To Terror Exploit Kit
2017-10-25 08:28:31
cvelist
cvelist
CVE-2014-6332
2014-11-11 22:00:00
openvas
openvas
Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)
2014-11-12 00:00:00
mskb
mskb
MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014
2014-11-11 00:00:00
nessus
nessus
MS14-064: Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443)
2014-11-11 00:00:00
securelist
securelist
Delving deep into VBScript
2018-07-03 13:00:13
The King is dead. Long live the King!
2018-05-09 06:00:56
malwarebytes
malwarebytes
RIG exploit kit distributes Princess ransomware
2017-08-31 20:04:32
mmpc
mmpc
Exploit kits remain a cybercrime staple against outdated software – 2016 threat landscape review series
2017-01-23 22:37:34
thn
thn
Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network
2022-11-09 11:01:00
Researchers Share New Insights Into RIG Exploit Kit Malware's Operations
2023-02-27 15:33:00
myhack58
myhack58
For a suspected CVE-2016-0189 the original attack sample debugging-vulnerability warning-the black bar safety net
2019-06-13 00:00:00
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2014-6332
fireeye14zdt8cert1metasploit1vulnerlab2exploitdb3packetstorm13saint4exploitpack3prion1seebug2checkpoint_advisories2securityvulns2canvas1symantec1attackerkb1cisa_kev1nvd1threatpost6cvelist1openvas1mskb1nessus1securelist2malwarebytes1mmpc1thn2myhack581kaspersky1