CVE

Id
71410  
CVE No.
CVE-2014-4114  
Status
Candidate  
Description
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a "Sandworm" attack in June through October 2014, aka "Windows OLE Remote Code Execution Vulnerability."  
Phase
Assigned (20140612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
678260 71410 CVE-2014-4114 EXPLOIT-DB:35020  View
678261 71410 CVE-2014-4114 URL:http://www.exploit-db.com/exploits/35020  View
678262 71410 CVE-2014-4114 EXPLOIT-DB:35019  View
678263 71410 CVE-2014-4114 URL:http://www.exploit-db.com/exploits/35019  View
678264 71410 CVE-2014-4114 EXPLOIT-DB:35055  View
678265 71410 CVE-2014-4114 URL:http://www.exploit-db.com/exploits/35055  View
678266 71410 CVE-2014-4114 MISC:http://www.isightpartners.com/2014/10/cve-2014-4114/  View
678267 71410 CVE-2014-4114 MISC:http://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-windows-zero-day-vulnerability-cve-2014-4114-aka-sandworm/  View
678268 71410 CVE-2014-4114 CONFIRM:http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx  View
678269 71410 CVE-2014-4114 MS:MS14-060  View
678270 71410 CVE-2014-4114 URL:http://technet.microsoft.com/security/bulletin/MS14-060  View
678271 71410 CVE-2014-4114 BID:70419  View
678272 71410 CVE-2014-4114 URL:http://www.securityfocus.com/bid/70419  View
678273 71410 CVE-2014-4114 OSVDB:113140  View
678274 71410 CVE-2014-4114 URL:http://osvdb.org/show/osvdb/113140  View
678275 71410 CVE-2014-4114 SECUNIA:60972  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15903 JVNDB-2014-004778 Microsoft .NET Framework におけるメモリアドレスについての重要な情報を取得される脆弱性 Microsoft .NET Framework は、ASLR 保護メカニズムをバイパスするため、メモリアドレスについての重要な情報を取得される脆弱性が存在します。 CVE-2014-4122 71410 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004778.html  View