CVE-2014-0315 vulnerability in Microsoft Products
Published on April 8, 2014
Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse cmd.exe file in the current working directory, as demonstrated by a directory that contains a .bat or .cmd file, aka "Windows File Handling Vulnerability."Per: http://cwe.mitre.org/data/definitions/426.html "CWE-426: Untrusted Search Path"
Products Associated with CVE-2014-0315
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2014-0315 are published in these products:
Exploit Probability
EPSS
22.57%
Percentile
95.73%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.