Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-6332
HistoryNov 11, 2014 - 10:55 p.m.

Remote code execution

2014-11-1122:55:00
PRIOn knowledge base
www.prio-n.com
10

8.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka “Windows OLE Automation Array Remote Code Execution Vulnerability.”

References

Related

packetstorm 13
saint 4
fireeye 14
zdt 8
seebug 2
exploitpack 3
vulnerlab 2
checkpoint_advisories 2
threatpost 6
cisa_kev 1
securityvulns 2
symantec 1
canvas 1
attackerkb 1
cve 1
cert 1
exploitdb 3
metasploit 1
securelist 2
openvas 1
mskb 1
nessus 1
thn 2
myhack58 1
malwarebytes 1
mmpc 1
kaspersky 1
packetstorm
packetstorm
Winamp Bento Browser Remote Code Execution
2015-10-26 00:00:00
IBM Security AppScan 9.0.2 Remote Code Execution
2015-06-01 00:00:00
Internet Download Manager OLE Automation Array Remote Code Execution
2015-07-21 00:00:00
saint
saint
Windows OLE Automation Array command execution
2014-11-17 00:00:00
Windows OLE Automation Array command execution
2014-11-17 00:00:00
Windows OLE Automation Array command execution
2014-11-17 00:00:00
fireeye
fireeye
GongDa vs. Korean News
2016-03-18 08:30:00
GongDa vs. Korean News
2016-03-18 12:30:00
Threat actors leverage EternalBlue exploit to deliver non-WannaCry payloads
2017-06-02 13:00:00
zdt
zdt
The World Browser 3.0 Final - Remote Code Execution Exploit
2015-10-22 00:00:00
Internet Explorer OLE Automation Array Remote Code Execution Exploit
2014-11-13 00:00:00
Havij - OLE Automation Array Remote Code Execution Exploit
2015-07-01 00:00:00
seebug
seebug
IE Godmode remote code execution vulnerability, CVE-2014-6332）
2017-03-06 00:00:00
IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution
2015-08-31 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (1)
2014-11-13 00:00:00
IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution
2015-06-01 00:00:00
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (Metasploit)
2014-11-13 00:00:00
vulnerlab
vulnerlab
MS HTA (HTML Application) - Code Execution (MS14-064)
2015-08-15 00:00:00
MS HTA (HTML Application) - Code Execution (MS14-064)
2015-08-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows OLE Obfuscated Automation Array Remote Code Execution (CVE-2014-6332)
2019-02-14 00:00:00
Microsoft Windows OLE Automation Array Remote Code Execution (MS14-064; CVE-2014-6332)
2014-11-11 00:00:00
threatpost
threatpost
EternalBlue Exploit Spreading Gh0st RAT, Nitol
2017-06-02 14:32:11
Malvertising Campaign Redirects Browsers To Terror Exploit Kit
2017-10-25 08:28:31
Angler Exploit Kit, Bedep Malware Inflating Video Views
2015-05-05 08:00:41
cisa_kev
cisa_kev
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
2022-03-25 00:00:00
securityvulns
securityvulns
Microsoft HTA &#40;HTML Application&#41; - Remote Code Execution Vulnerability &#40;MS14-064&#41;
2015-08-24 00:00:00
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00
symantec
symantec
Microsoft Windows CVE-2014-6332 OLE Remote Code Execution Vulnerability
2014-11-11 00:00:00
canvas
canvas
Immunity Canvas: MS14_064_IE_OLEAUT32
2014-11-11 22:55:00
attackerkb
attackerkb
CVE-2014-6332
2014-11-11 00:00:00
cve
cve
CVE-2014-6332
2014-11-11 22:55:00
cert
cert
Microsoft Windows Object Linking and Embedding (OLE) OleAut32 library SafeArrayRedim function vulnerable to remote code execution via Internet Explorer
2014-11-13 00:00:00
exploitdb
exploitdb
IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution
2015-06-01 00:00:00
Microsoft Internet Explorer &lt; 11 - OLE Automation Array Remote Code Execution (Metasploit)
2014-11-13 00:00:00
Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (1)
2014-11-13 00:00:00
metasploit
metasploit
MS14-064 Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution
2014-11-24 07:25:18
securelist
securelist
Delving deep into VBScript
2018-07-03 13:00:13
The King is dead. Long live the King!
2018-05-09 06:00:56
openvas
openvas
Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)
2014-11-12 00:00:00
mskb
mskb
MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014
2014-11-11 00:00:00
nessus
nessus
MS14-064: Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443)
2014-11-11 00:00:00
thn
thn
Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network
2022-11-09 11:01:00
Researchers Share New Insights Into RIG Exploit Kit Malware's Operations
2023-02-27 15:33:00
myhack58
myhack58
For a suspected CVE-2016-0189 the original attack sample debugging-vulnerability warning-the black bar safety net
2019-06-13 00:00:00
malwarebytes
malwarebytes
RIG exploit kit distributes Princess ransomware
2017-08-31 20:04:32
mmpc
mmpc
Exploit kits remain a cybercrime staple against outdated software – 2016 threat landscape review series
2017-01-23 22:37:34
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00

8.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for PRION:CVE-2014-6332
packetstorm13saint4fireeye14zdt8seebug2exploitpack3vulnerlab2checkpoint_advisories2threatpost6cisa_kev1securityvulns2symantec1canvas1attackerkb1cve1cert1exploitdb3metasploit1securelist2openvas1mskb1nessus1thn2myhack581malwarebytes1mmpc1kaspersky1