Skip to content
OpenAdvisories
High · 8.8 Known exploited Public exploit CVE-2014-6332 EUVD-2014-6216GHSA-w64p-pvrc-c5w3

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, …

Published Nov 11, 2014 · Updated Oct 22, 2025 · Assigned by microsoft

Description

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka "Windows OLE Automation Array Remote Code Execution Vulnerability."

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

Exploit-DB 9

GitHub 3 repositories

  • MarkoArmitage/metasploit-framework ★ 5 · Nov 29, 2014

    app turn nil publics and privates into blanks 3 months ago config Use bundler/setup for more graceful bundler related failures 11 days ago data Add token fiddling from nishang 12 hours ago db Revert …

  • mourr/CVE-2014-6332 ★ 2 · Aug 29, 2016

    CVE-2014-6332 ZeroDay POC - Starts PowerShell

  • tjjh89017/cve-2014-6332 ★ 2 · Jan 14, 2015

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References