CVE-2014-2815 Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execu...
HighCVSS 8.8
EPSS 43.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft onenote | = 2007-sp3 | No fix listed |
References
- blogs.technet.com patch vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- 60672 not-applicable third-party-advisory
- 69098 third-party-advisory vdb-entry
- 1030717 third-party-advisory vdb-entry
- MS14-048 patch vendor-advisory