NVD

Id
30388  
Name
CVE-2014-1819  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly control access to objects associated with font files, which allows local users to gain privileges via a crafted file, aka "Font Double-Fetch Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-12  
Modified Date
2017-01-06  
Seq
2014-1819  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160804 30388 CVE-2014-1819 60673  View
160805 30388 CVE-2014-1819 MS14-045  View
160806 30388 CVE-2014-1819 69143  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14910 JVNDB-2014-003785 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys は、フォントファイルに関連付けられたオブジェクトへのアクセスを適切に制御しないため、権限を取得される脆弱性が存在します。 CVE-2014-1819 69106 CVE-2014-1819 30388 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003785.html 2014-08-12 2014-08-20 View