CVE-2014-6352: Microsoft Windows Code Injection Vulnerability
Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.
Other sources
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the wild in October 2014 with a crafted PowerPoint document.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6352?
CVE-2014-6352 is rated as critical due to its potential for allowing remote code execution.
How do I fix CVE-2014-6352?
To fix CVE-2014-6352, you should apply the latest Microsoft security updates for your affected version of Windows.
What versions of Windows are affected by CVE-2014-6352?
CVE-2014-6352 affects Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2008 SP2, and various Windows Server 2012 versions.
Can CVE-2014-6352 be exploited remotely?
Yes, CVE-2014-6352 can be exploited remotely by attackers sending specially crafted OLE objects.
What are the consequences of exploiting CVE-2014-6352?
Exploiting CVE-2014-6352 can lead to unauthorized execution of arbitrary code on the vulnerable system.