NVD

Id
32184  
Name
CVE-2014-4148  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-15  
Modified Date
2015-11-05  
Seq
2014-4148  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
169215 32184 CVE-2014-4148 http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx  View
169216 32184 CVE-2014-4148 MS14-058  View
169217 32184 CVE-2014-4148 70429  View
169218 32184 CVE-2014-4148 ms-kmd-cve20144148-code-exec(96995)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15986 JVNDB-2014-004861 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における任意のコードを実行される脆弱性 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys には、任意のコードを実行される脆弱性が存在します。 CVE-2014-4148 71436 CVE-2014-4148 32184 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004861.html 2014-10-14 2014-10-22 View