Skip to content

CVE-2014-0263 The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to exec...

HighCVSS 9.3 EPSS 18.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with Internet Explorer, aka "Microsoft Graphics Component Memory Corruption Vulnerability."

Affected products

ProductAffected versionsFixed in
Microsoft windows 7 All versions No fix listed
Microsoft windows 8 All versions No fix listed
Microsoft windows 8.1 All versions No fix listed
Microsoft windows rt All versions No fix listed
Microsoft windows rt 8.1 All versions No fix listed
Microsoft windows server 2008 = r2-sp1 No fix listed
Microsoft Windows Server 2012 All versions No fix listed
Microsoft Windows Server 2012 = r2 No fix listed

References

  • 103160 broken-link vdb-entry
  • 56781 third-party-advisory
  • 65393 third-party-advisory vdb-entry
  • 1029743 third-party-advisory vdb-entry
  • MS14-007 patch vendor-advisory