CVE-2014-9266

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-12-08 · updated 2026-06-17
Weakness: CWE-94

Description

The STWConfig ActiveX control in Samsung SmartViewer does not properly initialize a variable, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Samsung Smart Viewer: all versions

References

http://www.securityfocus.com/bid/71489
http://www.zerodayinitiative.com/advisories/ZDI-14-400/
http://www.securityfocus.com/bid/71489
http://www.zerodayinitiative.com/advisories/ZDI-14-400/

Get alerted when CVE-2014-9266 or the next vulnerability affects your stack