EIP-2026-118956

This exploit leverages CVE-2014-6332 (MS14-064) to achieve remote code execution via a malicious HTTP server that serves a VBScript payload. The payload exploits a vulnerability in Windows OLE automation to execute arbitrary commands.