CVE-2014-6332

11.11.2014, 22:55

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka "Windows OLE Automation Array Remote Code Execution Vulnerability."

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoft	CNA	---				---
CVE	ADP	---				---
CISA-ADP	ADP	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 99%

Vendor	Product	Version
microsoft	windows_7	-
microsoft	windows_8	-
microsoft	windows_8.1	-
microsoft	windows_rt	-
microsoft	windows_rt_8.1	-
microsoft	windows_server_2003	-
microsoft	windows_server_2008	-
microsoft	windows_server_2012	-
microsoft	windows_vista	-

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://packetstormsecurity.com/files/134053/Avant-Browser-Lite-Ultimate-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134061/The-World-Browser-3.0-Final-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134062/HTML-Compiler-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134064/Microsoft-Compiled-HTML-Help-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134079/Winamp-Bento-Browser-Remote-Code-Execution.html

http://securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows

http://www.kb.cert.org/vuls/id/158647

http://www.securityfocus.com/bid/70952

http://www.securitytracker.com/id/1031184

http://www.us-cert.gov/ncas/alerts/TA14-318B

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-064

https://forsec.nl/wp-content/uploads/2014/11/ms14_064_ie_olerce.rb_.txt

https://www.exploit-db.com/exploits/37668/

https://www.exploit-db.com/exploits/37800/

https://www.exploit-db.com/exploits/38500/

https://www.exploit-db.com/exploits/38512/

http://packetstormsecurity.com/files/134053/Avant-Browser-Lite-Ultimate-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134061/The-World-Browser-3.0-Final-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134062/HTML-Compiler-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134064/Microsoft-Compiled-HTML-Help-Remote-Code-Execution.html

http://packetstormsecurity.com/files/134079/Winamp-Bento-Browser-Remote-Code-Execution.html

http://securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows

http://www.kb.cert.org/vuls/id/158647

http://www.securityfocus.com/bid/70952

http://www.securitytracker.com/id/1031184

http://www.us-cert.gov/ncas/alerts/TA14-318B

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-064

https://forsec.nl/wp-content/uploads/2014/11/ms14_064_ie_olerce.rb_.txt

https://www.exploit-db.com/exploits/37668/

https://www.exploit-db.com/exploits/37800/

https://www.exploit-db.com/exploits/38500/

https://www.exploit-db.com/exploits/38512/