CVE-2015-1670

Опубликовано: 13 мая 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability."

Ссылки

http://www.securityfocus.com/bid/74485
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032281
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044
http://www.securityfocus.com/bid/74485
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1032281
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04518

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9cj3-6fcw-36r3

github

больше 3 лет назад