New dangerous vulnerability discovered in Windows

In the November patch tuesday , this week, Microsoft closed a new dangerous vulnerability CVE-2014-6332 with update MS14-064 . The vulnerability is present in the OleAut32.dll system library, which is responsible for implementing OLE mechanisms and is used by Internet Explorer. CVE-2014-6332 covers Windows versions from Windows 95 (!) + IE3 to Windows 10 TP + IE11. An exploit for this vulnerability is detected by ESET AV products as Win32 / Exploit.CVE-2014-6332.A .



We strongly recommend that our users install the appropriate updates as soon as possible and, if you have not already done so, enable automatic delivery of updates using Windows Update (this option is enabled by default).