PT-2014-2028 · Microsoft · Windows Server 2008+5

Published 2014-11-11 · Updated 2025-04-04 · CVE-2014-4077

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions 2003 SP2 through 2008 SP2 and R2 SP1 Microsoft Windows Vista version SP2 Microsoft Windows 7 version SP1 Microsoft Office version 2007 SP3

Description The issue is related to the Input Method Editor (IME) component for Japanese in Windows operating systems, which has insufficient access restrictions. This allows a remote attacker to bypass sandbox protection mechanisms via a crafted PDF document, potentially leading to elevation of privilege. The vulnerability has been exploited in the wild in 2014. An attacker who successfully exploits this vulnerability could compromise the sandbox of a vulnerable application and gain access to the affected system with the rights of the logged-on user.

Recommendations For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Vista SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a version that includes the fix for this issue. For Microsoft Windows 7 SP1, update to a version that includes the fix for this issue. For Microsoft Office 2007 SP3, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the IMJPDCT.EXE component until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2021-04974

CVE-2014-4077

Affected Products

Office

Windows

Windows 7

Windows Server

Windows Server 2008

Windows Vista

References · 15

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4077 · Security Note
• http://blogs.technet.com/b/srd/archive/2014/11/11/assessing-risk-for-the-november-2014-security-updates.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4077 · Security Note
• https://bdu.fstec.ru/vul/2021-04974 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-078 · Vendor Advisory
• https://t.me/cvenotify/105045 · Telegram Post
• https://t.me/cvenotify/110658 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://cybersecurity-help.cz/vdb/SB2014111102 · Note
• https://t.me/cvenotify/117904 · Telegram Post
• http://technet.microsoft.com/security/bulletin/ms14-078 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• http://securitytracker.com/id/1031197 · Note
• https://t.me/cvenotify/84808 · Telegram Post
• http://securitytracker.com/id/1031196 · Note