CVE-2014-6352KEV · OVERDUE

Microsoft Windows Code Injection Vulnerability

High · published October 22, 2014

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1519
days past CISA
deadline
CVSS v3.1
7.8
EPSS
77%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 A single crafted PowerPoint document can unleash a world of chaos on your system! Think of it like a delivery driver showing up at your door with a package that contains a ticking time bomb — you let it in, and it explodes, wreaking havoc inside your home. This vulnerability in Windows systems is just as sneaky! An attacker could execute arbitrary code on your machine, which means they could take full control and do anything from stealing sensitive data to installing harmful software. It's like leaving your front door wide open and inviting intruders in for a party you never wanted!

Put simply

Think of it like a delivery driver showing up at your door with a package that contains a ticking time bomb — you let it in, and it explodes, wreaking havoc inside your home. This vulnerability in Windows systems is just as sneaky! This vulnerability, CVE-2014-6352, allows remote attackers to execute arbitrary code through crafted OLE objects in various versions of Windows, including Windows Vista, 7, and 8. The exploitation typically occurs via malicious PowerPoint documents.

What to do

An attacker could execute arbitrary code on your machine, which means they could take full control and do anything from stealing sensitive data to installing harmful software. It's like leaving your front door wide open and inviting intruders in for a party you never wanted! To defend against this threat, ensure all affected systems are updated with the latest security patches. Microsoft has released patches that address this vulnerability, so apply them immediately! Also, consider disabling OLE objects in PowerPoint to add an extra layer of protection. You've got this! Follow these steps and you'll be one step closer to making your system fortress strong! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.77485 · 99.6th percentile
Published
2014-10-22T14:00Z
KEV added
2022-02-25 · due 2022-08-25
EPSS history
Timeline
  • 25 FEB 00:00Z
    Added to CISA KEV — remediate by Aug 25
    kev
  • 22 OCT 14:00Z
    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold…
    cvelistv5