Microsoft Windows CVE-2014-6332 OLE Remote Code Execution Vulnerability

Bugtraq ID:	70952
Class:	Design Error
CVE:	CVE-2014-6332
Remote:	Yes
Local:	No
Published:	Nov 11 2014 12:00AM
Updated:	Oct 05 2017 04:01PM
Credit:	Robert Freeman of IBM X-Force.
Vulnerable:	Microsoft Windows Vista x64 Edition Service Pack 2 0 Microsoft Windows Vista Service Pack 2 0 Microsoft Windows Server 2012 R2 0 Microsoft Windows Server 2012 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2003 x64 Edition Service Pack 2 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows RT 8.1 Microsoft Windows RT 0 Microsoft Windows 8.1 for x64-based Systems 0 Microsoft Windows 8.1 for 32-bit Systems 0 Microsoft Windows 8 for x64-based Systems 0 Microsoft Windows 8 for 32-bit Systems 0 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Avaya Messaging Application Server 5.2.1 Avaya Messaging Application Server 5.0.1 Avaya Messaging Application Server 6.2 Avaya Messaging Application Server 5.2 Avaya Meeting Exchange - Webportal 6.2 Avaya Meeting Exchange - Webportal 6.0 Avaya Meeting Exchange - Webportal 5.2.1 Avaya Meeting Exchange - Webportal 5.2 Avaya Meeting Exchange - Webportal 5.0.1 Avaya Meeting Exchange - Web Conferencing Server 6.2 Avaya Meeting Exchange - Web Conferencing Server 6.0 Avaya Meeting Exchange - Web Conferencing Server 5.2.1 Avaya Meeting Exchange - Web Conferencing Server 5.2 Avaya Meeting Exchange - Web Conferencing Server 5.0.1 Avaya Meeting Exchange - Streaming Server 6.2 Avaya Meeting Exchange - Streaming Server 6.0 Avaya Meeting Exchange - Streaming Server 5.2.1 Avaya Meeting Exchange - Streaming Server 5.2 Avaya Meeting Exchange - Streaming Server 5.0.1 Avaya Meeting Exchange - Recording Server 6.2 Avaya Meeting Exchange - Recording Server 6.0 Avaya Meeting Exchange - Recording Server 5.2.1 Avaya Meeting Exchange - Recording Server 5.2 Avaya Meeting Exchange - Recording Server 5.0.1 Avaya Meeting Exchange - Client Registration Server 6.2 Avaya Meeting Exchange - Client Registration Server 6.0 Avaya Meeting Exchange - Client Registration Server 5.2.1 Avaya Meeting Exchange - Client Registration Server 5.2 Avaya Meeting Exchange - Client Registration Server 5.0.1 Avaya Communication Server 1000 Telephony Manager 4.0.1 Avaya Communication Server 1000 Telephony Manager 3.0.1 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya CallPilot 5.1 Avaya CallPilot 4.0.1 Avaya Aura Conferencing 6.0 Standard
Not Vulnerable:

Microsoft Windows CVE-2014-6332 OLE Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability.

An attacker can leverage this issue to execute arbitrary code and gain elevated privileges in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions.

Microsoft Windows CVE-2014-6332 OLE Remote Code Execution Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

This vulnerability is being exploited as part of multiple exploit kits, including Hunter, Nebula, Neutrino, Sweet, and Terror.

The following exploits are available:

• /data/vulnerabilities/exploits/70952.rb
• /data/vulnerabilities/exploits/70952.html.txt
• /data/vulnerabilities/exploits/70952.php
• /data/vulnerabilities/exploits/70952.rb
• /data/vulnerabilities/exploits/70952.html.txt
• /data/vulnerabilities/exploits/70952.php

Microsoft Windows CVE-2014-6332 OLE Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Microsoft Windows 8 for 32-bit Systems 0

• Microsoft Security Update for Windows 8 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=CCC800B9-86BD -4647-BBC2-5298F4FF9C5F


• Microsoft Security Update for Windows 8 (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=CD69E8A1-5E0E -4C96-8D8D-955EFEE0F7C0

Microsoft Windows 7 for 32-bit Systems SP1

• Microsoft Security Update for Windows 7 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=3A87EC28-695B -4958-8BA1-627A94ADAE22


• Microsoft Security Update for Windows 7 (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=C29892C1-BE8A -4E5E-AC51-5E87D7F30073

Microsoft Windows 7 for x64-based Systems SP1

• Microsoft Security Update for Windows 7 for x64-based Systems (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=99F4891E-78F2 -4346-BD8A-E4E5488957A0


• Microsoft Security Update for Windows 7 for x64-based Systems (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=67FE6F71-98E1 -4A63-8D80-141F2562BC03

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=0CA19D71-25AB -4E7E-AC6F-A6D55FDD3F85


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=9881AE58-0851 -447E-8263-DFB59E832595

Microsoft Windows 8 for x64-based Systems 0

• Microsoft Security Update for Windows 8 for x64-based Systems (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=9AC42912-ED45 -42AC-B157-424F1630C686


• Microsoft Security Update for Windows 8 for x64-based Systems (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=F118DD73-DE28 -4F3F-8D21-D3EA80D5E739

Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Security Update for Windows Server 2008 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=E6E8C4FC-44BD -48A5-A526-3A9BCE04455A


• Microsoft Security Update for Windows Server 2008 (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=69B043EE-D895 -4AC4-A582-6CB8FB77AD3C

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=370A1A88-28C2 -4EFC-BD24-4D789571BC0B

Microsoft Windows 8.1 for 32-bit Systems 0

• Microsoft Security Update for Windows 8.1 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=17D0F65C-94AC -4547-9220-FB2AECF3945D


• Microsoft Security Update for Windows 8.1 (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=6ACFE7B2-C8ED -4E8C-9394-59ACBDEF3679

Microsoft Windows Server 2008 for x64-based Systems SP2

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=531F01CD-4CAB -4A7C-BD53-8F9F5DC5A5B1


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=07776916-46EE -404E-AAAB-5A56005A05B2

Microsoft Windows 8.1 for x64-based Systems 0

• Microsoft Security Update for Windows 8.1 for x64-based Systems (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=BE98E463-FB20 -4258-A818-0BE765F8C499


• Microsoft Security Update for Windows 8.1 for x64-based Systems (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=F38E289F-A649 -44BC-85DB-339340A9CBF1

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=38855DDD-9CA8 -43A4-B4A5-90AAD10B6035

Microsoft Windows Server 2008 R2 for x64-based Systems SP1

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=CC211E8C-A2B6 -4E0E-990D-1868DB0B5A5B


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=D6967200-06B7 -47C5-9221-63011840A193

Microsoft Windows Server 2012 0

• Microsoft Security Update for Windows Server 2012 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=FBBD8B75-9046 -4115-A4A1-0E5A174BA529


• Microsoft Security Update for Windows Server 2012 (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=9983F7E3-44B1 -401E-A79E-D07A7EC2C8D5

Microsoft Windows Server 2012 R2 0

• Microsoft Security Update for Windows Server 2012 R2 (KB3006226)
  http://www.microsoft.com/downloads/details.aspx?familyid=A1F8C835-A5AA -401A-9712-FD2580AFC348


• Microsoft Security Update for Windows Server 2012 R2 (KB3010788)
  http://www.microsoft.com/downloads/details.aspx?familyid=9D962EB0-3C6D -4E3B-8450-B69673856549