PT-2014-7163 · Microsoft · Internet Explorer+1

Prot3Ct0R · Published 2014-11-11 · Updated 2026-02-23 · CVE-2014-6332

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function. This occurs due to improper handling of objects in memory by Internet Explorer. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For all affected versions of Microsoft Windows, apply the patch provided by Microsoft to fix the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-6332

Affected Products

Internet Explorer

Windows

References · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms14_064_ole_code_execution.rb · Exploit
• 🔥 https://github.com/MarkoArmitage/metasploit-framework · Exploit
• 🔥 https://exploit-db.com/exploits/35308 · Exploit
• 🔥 https://exploit-db.com/exploits/35230 · Exploit
• 🔥 https://forsec.nl/wp-content/uploads/2014/11/ms14_064_ie_olerce.rb_.txt · Exploit
• 🔥 https://exploit-db.com/exploits/38512 · Exploit
• 🔥 https://exploit-db.com/exploits/38500 · Exploit
• 🔥 http://packetstormsecurity.com/files/134064/Microsoft-Compiled-HTML-Help-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/37668 · Exploit
• 🔥 https://exploit-db.com/exploits/35229 · Exploit
• 🔥 https://exploit-db.com/exploits/37400 · Exploit
• 🔥 http://packetstormsecurity.com/files/134079/Winamp-Bento-Browser-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/37800 · Exploit
• 🔥 https://gist.github.com/worawit/84ab41358b8465966224 · Exploit
• 🔥 https://exploit-db.com/exploits/36516 · Exploit