CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-11-11
Microsoft Windows and Office IME (Japanese) Elevation of Privilege and Sandbox Escape (CVE-2014-4077)
[Affected Scope] Windows Server 2003/2008, Windows Vista, Windows 7, and Office 2007 environments with the Japanese Input Method Editor (IME) component IMJPDCT.EXE installed
[Impact] Remote attackers can bypass sandbox protection mechanisms via crafted PDF documents, escalating privileges to execute arbitrary code on the host system
[Mitigation] Apply the official Microsoft security update (MS14-078) or restrict execution permissions on the IMJPDCT.EXE binary