Oval Definition:oval:org.mitre.oval:def:28046
Revision Date:2014-12-29Version:47
Title:Windows OLE automation array remote code execution vulnerability - CVE-2014-6332 (MS14-064)
Description:OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka "Windows OLE Automation Array Remote Code Execution Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-6332
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Check for Windows Server 2003 x86/x64 or Windows XP x86 and vulnerable file version
  • Check for Windows Server 2003 x86/x64 or Windows XP x86
  • Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 for Itanium is installed
  • AND the version of oleaut32.dll is less than 5.2.3790.5464
  • OR Vista / 2k8 + vulnerable file version
  • Vista / 2K8
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Check for LDR/GDR
  • Check if version of Packager.dll is less than 6.0.6002.19220
  • OR Check for LDR
  • Check if version of Packager.dll is greater than or equal to 6.0.6002.23000
  • AND Check if version of Packager.dll is less than 6.0.6002.23527
  • OR Check for LDR (Oleaut32.dll)
  • Check if the the version of Oleaut32.dll is less than 6.0.6002.23523
  • AND Check if the version of Oleaut32.dll is greater than or equal to 6.0.6002.23000
  • OR Check if the version of Oleaut32.dll is less than 6.0.6002.19216
  • OR Win 7 / R2 + vulnerable file version
  • Win 7 / R2
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Check for LDR/GDR
  • Check if version of Packager.dll is less than 6.1.7601.18645
  • OR Check for LDR
  • Check if version of Packager.dll is greater than or equal to 6.1.7601.22000
  • AND Check if version of Packager.dll is less than 6.1.7601.22853
  • OR Check for LDR (Oleaut32.dll)
  • Check if the version of Oleaut32.dll is less than 6.1.7601.22846
  • AND Check if the version of Oleaut32.dll is greater than or equal to 6.1.7601.22000
  • OR Check if the version of Oleaut32.dll is less than 6.1.7601.18640
  • OR Win 8/2k12 and vulnerable file version
  • Win 8 / 2k12
  • Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Check for vulnerable version
  • Check for LDR
  • Check if the version of Packager.dll is less than 6.2.9200.21278
  • AND Check if the version of Packager.dll is greater than or equal to 6.2.9200.21000
  • OR Check for LDR (Oleaut32.dll)
  • Check if the version of Oleaut32.dll is less than 6.2.9200.21273
  • AND Check if the version of Oleaut32.dll is greater than or equal to 6.2.9200.21000
  • OR Check if the version of Oleaut32.dll is less than 6.2.9200.17155
  • OR Check if the version of Packager.dll is less than 6.2.9200.17160
  • OR Win 8.1 / 2K12 R2and vulnerable file version
  • Win 8.1 / 2k12 R2
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Either file version
  • Check if the version of packager.dll is less than 6.3.9600.17408
  • OR Check if the version of Oleaut32.dll is less than 6.3.9600.17403
  • BACK