Graphics Memory Corruption in Microsoft Windows and Office Products
CVE-2015-6106

Currently unrated

Key Information:

Vendor
Microsoft
Status
Lync
Live Meeting
Office
Windows Server 2008
Vendor
CVE Published:
9 December 2015

Summary

The vulnerability in the Windows font library exposes multiple Microsoft products to the risk of remote code execution through specially crafted embedded fonts. Attackers can exploit this flaw to gain unauthorized access or execute arbitrary code, impacting the integrity and security of user systems. This applies to various versions of Windows and Office including Vista, Server 2008, and multiple Office suites.

References

http://www.securitytracker.com/id/1034333
vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1034331
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

41% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.