NVD

Id
13376  
Name
CVE-2010-1883  
Description
Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted table in an embedded font, aka "Embedded OpenType Font Integer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-13  
Modified Date
2011-10-04  
Seq
2010-1883  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74060 13376 CVE-2010-1883 oval:org.mitre.oval:def:6881  View
74061 13376 CVE-2010-1883 MS10-076  View
74062 13376 CVE-2010-1883 TA10-285A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36398 JVNDB-2010-002178 複数の Microsoft 製品の Embedded OpenType Font Engine における整数オーバーフローの脆弱性 複数の Microsoft 製品の Embedded OpenType (EOT) Font Engine には、整数オーバーフローの脆弱性が存在します。 CVE-2010-1883 44463 CVE-2010-1883 13376 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002178.html 2010-10-12 2010-10-25 View