CVE-2007-1213

Опубликовано: 04 апр. 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.

Ссылки

http://www.securityfocus.com/archive/1/466186/100/200/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/23276
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1017845
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1215
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1797
Broken Link
http://www.securityfocus.com/archive/1/466186/100/200/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/23276
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1017845
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1215
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1797
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01742

Низкий

7.2 High

CVSS2

Дефекты

CWE-824

Связанные уязвимости

GHSA-h323-gv8m-f26x

github

почти 4 года назад