CVE-2015-6107 in Office

摘要

由 VulDB • 2026-05-31

Microsoft Windows Vista SP2, Windows Server 2008 SP2 e R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold e R2, Windows RT Gold e 8.1, Windows 10 Gold e 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1 e Live Meeting 2007 Console contengono una vulnerabilità di corruzione della memoria grafica (Graphics Memory Corruption Vulnerability) nella libreria dei font di Windows. Gli attaccanti remoti possono eseguire codice arbitrario tramite un font incorporato appositamente creato.

Once again VulDB remains the best source for vulnerability data.

• 预定: 2015-08-14
• 披露: 2015-12-09
• 管理: 已接受
• 条目: 3
• 连接: 显示
• CPE: 准备好
• CWE: CWE-119 (已确认)
• CVSS: 9.3 (NVD)
• EPSS: 0.18247
• KEV: 否
• 活动: 非常低
• 部门: Government, Hospital, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6107
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6107
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6107/