PT-2015-5747 · Microsoft · Windows Rt+13
Jihui Lu
+1
·
Publicado
2015-08-11
·
Atualizado
2019-05-15
·
CVE-2015-2435
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Vista SP2
Microsoft Windows Server 2008 SP2 and R2 SP1
Microsoft Windows 7 SP1
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012 Gold and R2
Microsoft Windows RT Gold and 8.1
Microsoft Windows 10
Microsoft Office 2007 SP3 and 2010 SP2
Microsoft Live Meeting 2007 Console
Microsoft Lync 2010
Microsoft Lync 2010 Attendee
Microsoft Lync 2013 SP1
Microsoft Lync Basic 2013 SP1
Microsoft Silverlight before 5.1.40728
Description
A remote code execution issue exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts. An attacker who successfully exploited this issue could take complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 8, update to a newer version to mitigate the risk.
For Microsoft Windows 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk.
For Microsoft Windows RT Gold and 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows 10, update to a newer version to mitigate the risk.
For Microsoft Office 2007 SP3 and 2010 SP2, update to a newer version to mitigate the risk.
For Microsoft Live Meeting 2007 Console, update to a newer version to mitigate the risk.
For Microsoft Lync 2010, update to a newer version to mitigate the risk.
For Microsoft Lync 2010 Attendee, update to a newer version to mitigate the risk.
For Microsoft Lync 2013 SP1, update to a newer version to mitigate the risk.
For Microsoft Lync Basic 2013 SP1, update to a newer version to mitigate the risk.
For Microsoft Silverlight before 5.1.40728, update to version 5.1.40728 or later to mitigate the risk.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
.Net Framework
Live Meeting
Lync
Office
Silverlight
Windows
Windows 10
Windows 7
Windows 8
Windows 8.1
Windows Rt
Windows Server 2008
Windows Server 2012
Windows Vista