CVE-2014-4114

Description

A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2014-4114
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-4045
• http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx
• http://www.isightpartners.com/2014/10/cve-2014-4114/
• http://secunia.com/advisories/60972
• http://www.exploit-db.com/exploits/35055
• http://www.exploit-db.com/exploits/35019
• http://www.exploit-db.com/exploits/35020
• http://www.securityfocus.com/bid/70419
• http://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-windows-zero-day-vulnerability-cve-2014-4114-aka-sandworm/
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-060
• http://osvdb.org/show/osvdb/113140