CVE-2014-2815

High · 8.8

CVSS

8.8

EPSS

43.8%

Published

Aug 12, 2014

CISA due date

—

The record

Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed