CVE-2014-6332

Summary

CVE-2014-6332 is a remote code execution vulnerability affecting various Microsoft Windows operating systems, including Server 2003 SP2, Vista SP2, Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, 8.1, Server 2012 Gold and R2, and Windows RT Gold and 8.1. The issue lies within OleAut32.dll in OLE, leading to improper handling of a size value in the SafeArrayDimen function. A maliciously crafted website can trigger this vulnerability by attempting to resize an array, allowing attackers to execute arbitrary code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.