Microsoft Uniscribe Remote Code Execution Vulnerability
Last Update Date:
9 Dec 2015 13:55
Release Date:
9 Dec 2015
3240
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
A remote code execution vulnerability exists when Windows Uniscribe improperly parses specially crafted fonts. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft Windows 7
- Microsoft Windows Server 2008 R2
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS15-130
Vulnerability Identifier
Source
Related Link
Share with