CVE-2014-1819 in Microsoft Windows
Summary
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly control access to objects associated with font files, which allows local users to gain privileges via a crafted file, aka "Font Double-Fetch Vulnerability."
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/29/2014
Disclosure
08/12/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70606 | Microsoft Windows Privileges access control | 264 | Not defined | Official fix | CVE-2014-1819 |