PT-2014-2029 · Microsoft · Windows 8 +9

🗓️ 21 Oct 2014 00:00:00Reported by Positive TechnologiesType

Remote code execution via crafted OLE object in Microsoft Office files, exploited by PowerPoint documents.

Reporter	Title	Published	Views	Family All 38
0day.today	MS Office 2007 and 2010 - OLE Arbitrary Command Execution Exploit	12 Nov 201400:00	–	zdt
0day.today	MS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit	16 Nov 201400:00	–	zdt
ATTACKERKB	Microsoft Internet Explorer Use-After-Free Vulnerability	15 Oct 201400:00	–	attackerkb
ATTACKERKB	CVE-2014-6352	22 Oct 201400:00	–	attackerkb
Circl	CVE-2014-6352	20 Oct 201400:00	–	circl
CISA KEV Catalog	Microsoft Windows Code Injection Vulnerability	25 Feb 202200:00	–	cisa_kev
CISA	Microsoft Releases Advisory for Unpatched Windows Vulnerability	22 Oct 201400:00	–	cisa
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	25 Feb 202200:00	–	cisa
Check Point Advisories	Microsoft Windows OLE Remote Code Execution (MS14-060; CVE-2014-4114; CVE-2014-6352)	14 Oct 201400:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows OLE Remote Code Execution (MS14-060) - ver 2 (CVE-2014-4114; CVE-2014-6352)	19 Oct 201400:00	–	checkpoint_advisories

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_run_as_admin.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_python.rb
exploit-db	www.exploit-db.com/exploits/35236
exploit-db	www.exploit-db.com/exploits/35020
exploit-db	www.exploit-db.com/exploits/35055
exploit-db	www.exploit-db.com/exploits/35235
exploit-db	www.exploit-db.com/exploits/35216
exploit-db	www.exploit-db.com/exploits/35019
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2021-04976

04 Apr 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 29.3

CVSS 3.17.8

EPSS0.90729