Product:
Windows
Summary
Microsoft Windows Vista, Windows Server 2008, Windows 7, Windows 8, Windows 8.1, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document. This vulnerability was exploited in the wild during the Sandworm attack from June to October 2014.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2014-4114 |
Exploitation
To exploit this vulnerability, an attacker can create a malicious Office document containing a specially crafted OLE object. When a user opens this document, the crafted object can trigger the execution of arbitrary code on the user’s system, allowing the attacker to gain control over the affected machine.
Affected Products
- Windows Vista SP2: Affected by the OLE object vulnerability allowing remote code execution.
- Windows Server 2008 SP2: Vulnerable to exploitation through crafted Office documents.
- Windows 7 SP1: Can be compromised by opening malicious Office files.
- Windows 8 and 8.1: At risk from the same OLE object exploit.
- Windows Server 2012 Gold and R2: Susceptible to remote code execution via Office documents.
- Windows RT Gold and 8.1: Vulnerable to the crafted OLE object attack.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Microsoft. Regularly updating systems and following vendor instructions can help protect against potential exploits.