CVE-2014-4077highunder attack

CVE-2014-4077

Published · Updated

Follow this CVE+ Monitor Input Method Editor Japanese

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.8epss 55%
from disclosure to weapon
Published on NVDNov 11
CISA KEV+2752d
Action required by CISAfederal deadline: 2022-06-15

Apply updates per vendor instructions.

In short

A flaw in Microsoft's Japanese input method (IME) allows attackers to escape sandbox restrictions by sending a specially crafted PDF file. This lets malicious code run with higher privileges than it should have.

Technical detail

The vulnerability exists in IMJPDCT.EXE (Japanese IME) on affected Windows and Office versions, where a malicious PDF triggers a sandbox bypass. Remote attackers can escalate privileges without user interaction beyond opening the document; the flaw was actively exploited in the wild during 2014.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka "Microsoft IME (Japanese) Elevation of Privilege Vulnerability," as exploited in the wild in 2014.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a