Vulnerability identifier: #VU5112

Vulnerability risk: High

CVSSv3.1: 9.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2014-6332

CWE-ID: CWE-119

Exploitation vector: Network

Exploits in database: 12

• June 17, 2021
  • IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution [Exploit-DB]
• April 7, 2020
  • cve-2018-8174_analysis (Analysis of VBS exploit CVE-2018-8174) [Github]
• March 18, 2020
  • The World Browser 3.0 Final - Remote Code Execution [Exploit-DB]
  • HTML Compiler - Remote Code Execution [Exploit-DB]
  • Microsoft Windows HTA (HTML Application) - Remote Code Execution (MS14-064) [Exploit-DB]
  • Internet Download Manager - OLE Automation Array Remote Code Execution [Exploit-DB]
  • Havij - OLE Automation Array Remote Code Execution [Exploit-DB]
  • Acunetix 9.5 - OLE Automation Array Remote Code Execution [Exploit-DB]
  • Microsoft Internet Explorer OLE Pre-IE11 - Automation Array Remote Code Execution / PowerShell VirtualAlloc (MS14-064) [Exploit-DB]
  • Microsoft Internet Explorer < 11 - OLE Automation Array Remote Code Execution (Metasploit) [Exploit-DB]
  • Microsoft Internet Explorer 11 - OLE Automation Array Remote Code Execution (1) [Exploit-DB]
  • MS14-064 Microsoft Internet Explorer Windows OLE Automation Array Remote Code Execution [Metasploit]

Impact: Code execution

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft