PT-2014-2029 · Microsoft · Windows 8.1+9

Published 2014-10-21 · Updated 2025-04-04 · CVE-2014-6352

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1

Description The issue is related to errors in code generation management, allowing remote attackers to execute arbitrary code via a crafted OLE object. This has been exploited in the wild, for example, with a crafted PowerPoint document in October 2014. The vulnerability can be triggered when a user opens a specially crafted Microsoft Office file containing OLE objects, potentially giving an attacker the same user rights as the current user.

Recommendations For Microsoft Windows versions Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, consider avoiding the use of OLE objects in Microsoft Office files until a fix is available. As a temporary workaround, restrict access to specially crafted Microsoft Office files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2021-04976

CVE-2014-6352

Affected Products

Office

Office Powerpoint

Windows

Windows 7

Windows 8

Windows 8.1

Windows Rt

Windows Server 2008

Windows Server 2012

Windows Vista

References · 25

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_python.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms14_064_packager_run_as_admin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/35236 · Exploit
• 🔥 https://exploit-db.com/exploits/35020 · Exploit
• 🔥 https://exploit-db.com/exploits/35216 · Exploit
• 🔥 https://exploit-db.com/exploits/35235 · Exploit
• 🔥 https://exploit-db.com/exploits/35055 · Exploit
• 🔥 https://exploit-db.com/exploits/35019 · Exploit
• http://blogs.technet.com/b/srd/archive/2014/11/11/assessing-risk-for-the-november-2014-security-updates.aspx · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6352 · Security Note
• https://technet.microsoft.com/library/security/3010060 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6352 · Security Note
• https://bdu.fstec.ru/vul/2021-04976 · Security Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note