CVE-2014-6317 in Windows

摘要

由 VulDB • 2026-07-19

Microsoft Windows Server 2003 SP2、Windows Vista SP2、Windows Server 2008 SP2 e R2 SP1、Windows 7 SP1、Windows 8、Windows 8.1、Windows Server 2012 Gold e R2, nonché Windows RT Gold e 8.1 presentano un errore di indice dell'array in win32k.sys nei driver in modalità kernel che consente agli attaccanti remoti di causare una denial of service (riavvio) tramite un font TrueType appositamente creato, noto come "Denial of Service in Windows Kernel Mode Driver Vulnerability".

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 预定: 2014-09-11
• 披露: 2014-11-11
• 管理: 已接受
• 条目: VDB-68196
• CPE: 准备好
• CWE: CWE-399 (已确认)
• CVSS: 7.1 (NVD)
• EPSS: 0.18428
• KEV: 否
• 活动: 非常低
• 部门: Industry, Lawfirm, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-6317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-6317
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-6317/