CVE-2014-4077—Microsoft IME Japanese Privilege Escalation Vulnerability

漏洞名称

Microsoft IME Japanese Privilege Escalation Vulnerability

描述

Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2014-4077

相关 CWE

• CWE-264