NVD

Id
15286  
Name
CVE-2010-3956  
Description
The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-16  
Modified Date
2011-07-18  
Seq
2010-3956  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86089 15286 CVE-2010-3956 oval:org.mitre.oval:def:12357  View
86090 15286 CVE-2010-3956 MS10-091  View
86091 15286 CVE-2010-3956 1024873  View
86092 15286 CVE-2010-3956 TA10-348A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36840 JVNDB-2010-002620 Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性 Microsoft Windows の OpenType Font ドライバは、配列の索引処理を適切に実行しないため、権限を取得される脆弱性が存在します。 CVE-2010-3956 46536 CVE-2010-3956 15286 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002620.html 2010-12-14 2011-01-13 View