CVE-2014-4077

Produto

Microsoft / Input Method Editor (IME) Japanese

Vulnerabilidade

Microsoft IME Japanese Privilege Escalation Vulnerability

Adicionado ao KEV

25 de mai. de 2022

Corrigir até

15 de jun. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2014-4077