PT-2015-4434 · Microsoft · Windows Rt+6
Publicado
2015-02-10
·
Atualizado
2019-05-14
·
CVE-2015-0059
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Windows Server 2008 R2 SP1
Windows 7 SP1
Windows 8
Windows 8.1
Windows Server 2012 Gold and R2
Windows RT Gold and 8.1
Description
A remote code execution issue exists in the Windows kernel-mode driver (win32k.sys) due to improper handling of TrueType fonts. This could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full administrative rights. The exploitation of this issue requires convincing a user to open a specially crafted document or visit an untrusted website containing embedded TrueType fonts.
Recommendations
For Windows Server 2008 R2 SP1, update to a version that includes the fix for the TrueType font parsing issue.
For Windows 7 SP1, update to a version that includes the fix for the TrueType font parsing issue.
For Windows 8, update to a version that includes the fix for the TrueType font parsing issue.
For Windows 8.1, update to a version that includes the fix for the TrueType font parsing issue.
For Windows Server 2012 Gold and R2, update to a version that includes the fix for the TrueType font parsing issue.
For Windows RT Gold and 8.1, update to a version that includes the fix for the TrueType font parsing issue.
As a temporary workaround, consider restricting the use of TrueType fonts in documents and websites until a patch is available.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 7 Sp1
Windows 8
Windows 8.1
Windows Rt
Windows Server 2008 R2 Sp1
Windows Server 2012