CVE-2015-0059

MEDIUM · 6.9 CVSS Gepubliceerd: 11-02-2015 CWE-264

Beschrijving

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted TrueType font, aka "TrueType Font Parsing Remote Code Execution Vulnerability."

Vendors

Microsoft

Affected products

Windows 7 Windows 8 Windows 8.1 Windows Rt Windows Rt 8.1 Windows Server 2008 Windows Server 2012

References

www.securityfocus.com
docs.microsoft.com
exchange.xforce.ibmcloud.com