CVE-2014-1824 — Code Injection in Microsoft Windows Server 2008

CWE-94 — Code Injection5 documents3 sources
Severity
9.3CRITICALNVD
EPSS
9.7%
top 7.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Windows Server 2008Microsoft Windows Server 2012
Timeline
PublishedJul 8
Latest updateMay 14

Description

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (aka .JNT) file, aka "Windows Journal Remote Code Execution Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: support.microsoft.com ↗Patch: support.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-h7qh-xjxg-vww9: Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8↗2022-05-14
▶

🕵️Threat Intelligence

3
Talos
Microsoft Update Tuesday August 2014: Media Center and Internet Explorer↗2014-08-12
▶
Talos
Microsoft Update Tuesday August 2014: Media Center and Internet Explorer↗2014-08-12
▶
Talos
Microsoft Update Tuesday July 2014: light month, mostly Internet Explorer↗2014-07-08
▶