Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-4073
HistoryOct 15, 2014 - 10:55 a.m.

CVE-2014-4073

2014-10-1510:55:07
CWE-264
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka “.NET ClickOnce Elevation of Privilege Vulnerability.”

Affected configurations

NVD
Node
microsoft.net_frameworkMatch2.0sp2
OR
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch3.5.1
OR
microsoft.net_frameworkMatch4.0
OR
microsoft.net_frameworkMatch4.5
OR
microsoft.net_frameworkMatch4.5.1
OR
microsoft.net_frameworkMatch4.5.2

Related

exploitpack 3
msrc 1
prion 1
checkpoint_advisories 1
cvelist 1
cve 1
symantec 1
exploitdb 3
seebug 2
nessus 1
mskb 1
googleprojectzero 1
openvas 1
kaspersky 1
securityvulns 1
exploitpack
exploitpack
Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution
2017-04-20 00:00:00
Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privilege Escalation
2017-04-25 00:00:00
Microsoft Windows 10 - COM Desktop Broker Privilege Escalation
2019-01-14 00:00:00
msrc
msrc
More Details About CVE-2014-4073 Elevation of Privilege Vulnerability
2014-10-14 07:00:00
prion
prion
Privilege escalation
2014-10-15 10:55:00
checkpoint_advisories
checkpoint_advisories
Microsoft .NET ClickOnce Elevation of Privilege (MS14-057; CVE-2014-4073)
2014-10-14 00:00:00
cvelist
cvelist
CVE-2014-4073
2014-10-15 10:00:00
cve
cve
CVE-2014-4073
2014-10-15 10:55:07
symantec
symantec
Microsoft .NET Framework ClickOnce CVE-2014-4073 Remote Privilege Escalation Vulnerability
2014-10-14 00:00:00
exploitdb
exploitdb
Microsoft Windows 10 - COM Desktop Broker Privilege Escalation
2019-01-14 00:00:00
Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privilege Escalation
2017-04-25 00:00:00
Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution
2017-04-20 00:00:00
seebug
seebug
Windows: Dolby Audio X2 Service EoP (CVE-2017-7293)
2017-04-27 00:00:00
Windows: ManagementObject Arbitrary .NET Serialization RCE（CVE-2017-0160）
2017-04-19 00:00:00
nessus
nessus
MS14-057: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (3000414)
2014-10-15 00:00:00
mskb
mskb
MS14-057: Vulnerabilities in the .NET Framework could allow remote code execution: October 14, 2014
2014-10-14 00:00:00
googleprojectzero
googleprojectzero
Exploiting .NET Managed DCOM
2017-04-28 00:00:00
openvas
openvas
Microsoft .NET Framework Remote Code Execution Vulnerability (3000414)
2014-10-15 00:00:00
kaspersky
kaspersky
KLA10603 Multiple vulnerabilities in Microsoft .NET Framework
2014-11-11 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2014-10-15 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON
Related for NVD:CVE-2014-4073
exploitpack3msrc1prion1checkpoint_advisories1cvelist1cve1symantec1exploitdb3seebug2nessus1mskb1googleprojectzero1openvas1kaspersky1securityvulns1