CVE-2014-2815

HIGH

Microsoft OneNote 2007 SP3 - Remote Code Execution via Crafted OneNote File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-2815. PoCs published by Edubr2020.

AI-analyzed exploit summary This repository describes a directory traversal vulnerability in Microsoft Office OneNote 2007 (CVE-2014-2815) that allows arbitrary file extraction via crafted .ONEPKG files. The PoC explains how to exploit this to achieve arbitrary code execution by placing malicious files in system directories or startup folders.

Description

Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."

Exploits (1)

nomisec WRITEUP 3 stars

by Edubr2020 · poc

https://github.com/Edubr2020/CABTrap_OneNote2007

View Code ZIP pw:eip

This repository describes a directory traversal vulnerability in Microsoft Office OneNote 2007 (CVE-2014-2815) that allows arbitrary file extraction via crafted .ONEPKG files. The PoC explains how to exploit this to achieve arbitrary code execution by placing malicious files in system directories or startup folders.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Office OneNote 2007 SP3

No auth needed

Prerequisites: Vulnerable version of Microsoft Office OneNote 2007 · Ability to deliver a crafted .ONEPKG file to the target

MITRE ATT&CK