CVEvulnerability

CVE-2015-6108

9.3 HIGH Published 2015-12-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-12-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6; Skype for Business 2016; Lync 2010; Lync 2013 SP1; Live Meeting 2007 Console; and Silverlight 5 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Affected configurations

• microsoft live meeting 2007 • microsoft lync 2010 • microsoft lync 2013 • microsoft office 2007 • microsoft office 2010 • microsoft silverlight 5.0 • microsoft skype for business 2016 • microsoft word viewer • microsoft windows 7 • microsoft windows 8 • microsoft windows 8.1 • microsoft windows rt • microsoft windows rt 8.1 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows vista • microsoft .net framework 3.0 • microsoft .net framework 4.0 • microsoft .net framework 4.5 • microsoft .net framework 4.5.1 • microsoft .net framework 4.5.2 • microsoft .net framework 4.6 • microsoft .net framework 3.5.1 • microsoft .net framework 3.5

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References