Actively exploited · Published Oct 15, 2014 · Assigned by microsoft
CVE-2014-4114
High 7.8 Exploited
In plain English
A high-severity security flaw in Windows from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). The chance it is exploited in the next 30 days is estimated at 81.6% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Mar 24, 2022.
Official description
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a "Sandworm" attack in June through October 2014, aka "Windows OLE Remote Code Execution Vulnerability."
Affected products (as reported)
References
- http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx x_refsource_CONFIRM
- http://www.isightpartners.com/2014/10/cve-2014-4114/ x_refsource_MISC
- 60972 third-party-advisory, x_refsource_SECUNIA
- 35055 exploit, x_refsource_EXPLOIT-DB
- 35019 exploit, x_refsource_EXPLOIT-DB
- 35020 exploit, x_refsource_EXPLOIT-DB
- 70419 vdb-entry, x_refsource_BID
- http://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-windows-zero-day-vulnerability-cve-2014-4114-aka-sandworm/ x_refsource_MISC
- MS14-060 vendor-advisory, x_refsource_MS
- 113140 vdb-entry, x_refsource_OSVDB
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-4114 government-resource