CVE

Id
71444  
CVE No.
CVE-2014-4148  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."  
Phase
Assigned (20140612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
678419 71444 CVE-2014-4148 CONFIRM:http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx  View
678420 71444 CVE-2014-4148 MS:MS14-058  View
678421 71444 CVE-2014-4148 URL:http://technet.microsoft.com/security/bulletin/MS14-058  View
678422 71444 CVE-2014-4148 BID:70429  View
678423 71444 CVE-2014-4148 URL:http://www.securityfocus.com/bid/70429  View
678424 71444 CVE-2014-4148 SECUNIA:60970  View
678425 71444 CVE-2014-4148 URL:http://secunia.com/advisories/60970  View
678426 71444 CVE-2014-4148 XF:ms-kmd-cve20144148-code-exec(96995)  View

Related JVN