CVE-2015-6106

Currently unrated

Key Information:

Vendor
Microsoft
Status
Lync
Live Meeting
Office
Windows Server 2008
Vendor
CVE Published:
9 December 2015

Summary

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

References

http://www.securitytracker.com/id/1034333
vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1034331
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

75% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.