CVE-2014-4114

Summary

CVE-2014-4114 is a remote code execution vulnerability affecting multiple Microsoft Windows operating systems, including Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1. This issue arises due to the improper handling of a crafted OLE object in Microsoft Office documents. Attackers can exploit this vulnerability to execute arbitrary code at the target system's privilege level. This weakness was successfully exploited in the wild between June and October 2014 in attacks attributed to the Sandworm group.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.