PT-2015-1569 · Microsoft+1 · Windows+1

Cedric Halbronn + 2 · Publicado 2015-07-20 · Atualizado 2025-04-07 · CVE-2015-2426

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Adobe Type Manager Library versions prior to the fixed version

Description The issue is caused by a buffer underflow in the atmfd.dll library, allowing remote attackers to execute arbitrary code via a crafted OpenType font. This could enable an attacker to take complete control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Adobe Type Manager Library, update to a version that fixes the buffer underflow issue in atmfd.dll to prevent remote code execution. As a temporary workaround, consider restricting the use of specially crafted OpenType fonts until a patch is available. Avoid using the Windows Adobe Type Manager Library with untrusted font sources until the issue is resolved.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-124

CWE-119

Identificadores relacionados

BDU:2015-10882

CVE-2015-2426

Produtos afetados

Type Manager Library

Windows

Referências · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_078_atmfd_bof.rb · Exploit
• 🔥 http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak · Exploit
• 🔥 https://exploit-db.com/exploits/38222 · Exploit
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2426 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2426 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2426 · Nota de Segurança
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Nota
• https://t.me/cvenotify/110680 · Publicação no Telegram
• http://technet.microsoft.com/security/bulletin/MS15-078 · Nota
• http://kb.cert.org/vuls/id/103336 · Nota
• http://technet.microsoft.com/security/bulletin/ms15-078 · Nota
• https://t.me/cvenotify/107815 · Publicação no Telegram
• http://securitytracker.com/id/1032991 · Nota
• http://securityfocus.com/bid/75951 · Nota
• https://bdu.fstec.ru/vul/2015-10882 · Nota de Segurança