Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-6352
HistoryOct 22, 2014 - 2:55 p.m.

CVE-2014-6352

2014-10-2214:55:06
CWE-94
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.967 High

EPSS

Percentile

99.7%

JSON

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document.

Affected configurations

NVD
Node
microsoftwindows_7Match-sp1
OR
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rtMatch-gold
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2008sp2
OR
microsoftwindows_server_2008Matchr2sp1
OR
microsoftwindows_server_2012Match-gold
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_vistasp2

Related

cve 1
cisa_kev 1
zdt 2
seebug 1
cvelist 1
exploitpack 2
metasploit 1
cisa 2
attackerkb 2
packetstorm 2
nessus 2
symantec 1
prion 1
openvas 1
checkpoint_advisories 2
mskb 1
thn 2
threatpost 3
exploitdb 2
securityvulns 1
myhack58 1
kaspersky 1
cve
cve
CVE-2014-6352
2014-10-22 14:55:06
cisa_kev
cisa_kev
Microsoft Windows Code Injection Vulnerability
2022-02-25 00:00:00
zdt
zdt
MS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
2014-11-16 00:00:00
MS Office 2007 and 2010 - OLE Arbitrary Command Execution Exploit
2014-11-12 00:00:00
seebug
seebug
MS Office 2007 and 2010 - OLE Arbitrary Command Execution
2014-11-13 00:00:00
cvelist
cvelist
CVE-2014-6352
2014-10-22 14:00:00
exploitpack
exploitpack
Microsoft-Office-2007-and-2010---OLE-Arbitrary-Command-Execution
2015-01-04 16:00:19
Microsoft Office 20072010 - OLE Arbitrary Command Execution
2014-11-12 00:00:00
metasploit
metasploit
MS14-064 Microsoft Windows OLE Package Manager Code Execution
2014-11-12 07:10:49
cisa
cisa
Microsoft Releases Advisory for Unpatched Windows Vulnerability
2014-10-22 00:00:00
CISA Adds Four Known Exploited Vulnerabilities to Catalog
2022-02-25 00:00:00
attackerkb
attackerkb
CVE-2014-6352
2014-10-22 00:00:00
Microsoft Internet Explorer Use-After-Free Vulnerability
2014-10-15 00:00:00
packetstorm
packetstorm
MS14-064 Microsoft Windows OLE Package Manager Code Execution
2014-11-13 00:00:00
MS14-064 Microsoft Windows OLE Package Manager Code Execution Through Python
2014-11-14 00:00:00
nessus
nessus
MS KB3010060: Vulnerability in Microsoft OLE Could Allow Remote Code Execution (deprecated)
2014-10-22 00:00:00
MS14-064: Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443)
2014-11-11 00:00:00
symantec
symantec
Microsoft Windows CVE-2014-6352 OLE Remote Code Execution Vulnerability
2014-10-21 00:00:00
prion
prion
Code injection
2014-10-22 14:55:00
openvas
openvas
Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)
2014-11-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows OLE Remote Code Execution (MS14-060; CVE-2014-4114; CVE-2014-6352)
2014-10-14 00:00:00
Microsoft Windows OLE Remote Code Execution (MS14-060) - ver 2 (CVE-2014-4114; CVE-2014-6352)
2014-10-19 00:00:00
mskb
mskb
MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014
2014-11-11 00:00:00
thn
thn
Microsoft PowerPoint Vulnerable to Zero-Day Attack
2014-10-22 00:54:00
CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog
2022-03-01 04:37:00
threatpost
threatpost
'Dropping Elephant' APT Attackers Targets Old Windows Flaws
2016-07-08 11:04:30
November 2014 Microsoft Patch Tuesday Security Bulletins
2014-11-11 14:07:38
Sofacy APT28 Gang Using New Backdoors, Zero Days
2015-12-04 07:05:37
exploitdb
exploitdb
Microsoft Office 2007/2010 - OLE Arbitrary Command Execution
2014-11-12 00:00:00
Microsoft Windows - OLE Package Manager Code Execution (MS14-064) (Metasploit)
2014-11-14 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.967 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2014-6352
cve1cisa_kev1zdt2seebug1cvelist1exploitpack2metasploit1cisa2attackerkb2packetstorm2nessus2symantec1prion1openvas1checkpoint_advisories2mskb1thn2threatpost3exploitdb2securityvulns1myhack581kaspersky1