Microsoft Windows Object Linking and Embedding (OLE) OleAut32 library SafeArrayRedim function vulnerable to remote code execution via Internet Explorer

🗓️ 13 Nov 2014 00:00:00Reported by CERTType

Microsoft Windows OLE vulnerability in OleAut32 library SafeArrayRedim function allows remote code execution via Internet Explore

Reporter	Title	Published	Views	Family All 89
0day.today	Internet Explorer OLE Automation Array Remote Code Execution Exploit	13 Nov 201400:00	–	zdt
0day.today	Internet Explorer OLE Automation Array Remote Code Execution (msf) Exploit	13 Nov 201400:00	–	zdt
0day.today	Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution Exploit	1 Dec 201400:00	–	zdt
0day.today	IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution Exploit	2 Jun 201500:00	–	zdt
0day.today	Havij - OLE Automation Array Remote Code Execution Exploit	1 Jul 201500:00	–	zdt
0day.today	Internet Download Manager - OLE Automation Array Remote Code Execution Exploit	21 Jul 201500:00	–	zdt
0day.today	Microsoft Windows HTA (HTML Application) - Remote Code Execution Exploit	15 Aug 201500:00	–	zdt
0day.today	HTML Compiler - Remote Code Execution Exploit	20 Oct 201500:00	–	zdt
0day.today	The World Browser 3.0 Final - Remote Code Execution Exploit	22 Oct 201500:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	10 Jul 201819:31	–	githubexploit

Source	Link
technet	www.technet.microsoft.com/library/security/MS14-064
web	www.web.nvd.nist.gov/view/vuln/detail
securityintelligence	www.securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows/
forsec	www.forsec.nl/wp-content/uploads/2014/11/ms14_064_ie_olerce.rb_.txt

18 Nov 2014 18:55Current

8.7High risk

Vulners AI Score8.7

CVSS 29.3

CVSS 3.18.8

EPSS0.94094

SSVC