Microsoft Graphics Component Remote Code Execution Vulnerabilities
Last Update Date:
11 Jun 2014 14:31
Release Date:
11 Jun 2014
3606
Views
RISK: High Risk
TYPE: Operating Systems - Windows OS
A remote code execution vulnerability exists in the way that affected components handle specially crafted font files. The vulnerability could allow remote code execution if a user opens a specially crafted file or webpage. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- Windows Server 2003
- Windows Vista
- Windows Server 2008
- Windows 7
- Windows Server 2008 R2
- Windows 8 and Windows 8.1
- Windows Server 2012 and Windows Server 2012 R2
- Windows RT and Windows RT 8.1
- Microsoft Office 2007
- Microsoft Office 2010
- Microsoft Live Meeting 2007 Console
- Microsoft Lync 2010
- Microsoft Lync 2013
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/library/security/MS14-036
Vulnerability Identifier
Source
Related Link
Share with