Exploit / PoChighExploited in the wild

Addressing CVE-2014

Palo Alto Unit 42by Palo Alto NetworksJan 28, 2022 · 21:24 UTC (Jan 28, 2022)4 min read3 · 1 read

Read at unit42.paloaltonetworks.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2014-6332 CVE-2014-0322 CVE-2014-1776 CVE-2014-7331

Tags: cve-2014-6332 cve-2014-0322 cve-2014-1776 cve-2014-7331 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-0322	Use-After-Free Remote Code Execution in Microsoft Internet Explorer	—	85%	KEV	— KEV May 4, 2022
CVE-2014-1776	Use-After-Free Memory Corruption RCE in Microsoft Internet Explorer	—	83%	KEV	— KEV Jan 28, 2022
CVE-2014-6332	Remote Code Execution via Array Bounds Flaw in Microsoft Windows OLE Automation	—	95%	KEV	— KEV Mar 25, 2022

From the original article

4 min read at unit42.paloaltonetworks.com

Continuing a recent trend in which Internet Explorer vulnerabilities are exploited using Flash, samples of an SWF purportedly used in conjunction with CVE-2014-6332 have appeared in several places. The most famous examples of this trend are the exploits for CVE-2014-0322 and CVE-2014-1776 .

Palo Alto Unit 42

By Palo Alto Networks · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.