NVD

Id
23924  
Name
CVE-2015-1671  
Description
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-05-13  
Modified Date
2017-01-02  
Seq
2015-1671  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126890 23924 CVE-2015-1671 MS15-044  View
126891 23924 CVE-2015-1671 74490  View
126892 23924 CVE-2015-1671 1032281  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7355 JVNDB-2015-002675 Microsoft .NET Framework などの Microsoft 製品で使用される Windows DirectWrite ライブラリにおける任意のコードを実行される脆弱性 Microsoft .NET Framework およびその他の Microsoft 製品で使用される Windows DirectWrite ライブラリには、任意のコードを実行される脆弱性が存在します。 CVE-2015-1671 78896 CVE-2015-1671 23924 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002675.html 2015-05-12 2016-01-15 View