NVD

Id
47566  
Name
CVE-2009-0231  
Description
The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka "Embedded OpenType Font Heap Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-15  
Modified Date
2010-08-21  
Seq
2009-0231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238366 47566 CVE-2009-0231 20090714 Microsoft Embedded OpenType Font Engine (T2EMBED.DLL) Heap Buffer Overflow Vulnerability  View
238367 47566 CVE-2009-0231 oval:org.mitre.oval:def:5457  View
238368 47566 CVE-2009-0231 MS09-029  View
238369 47566 CVE-2009-0231 1022543  View
238370 47566 CVE-2009-0231 TA09-195A  View
238371 47566 CVE-2009-0231 ADV-2009-1887  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40908 JVNDB-2009-001914 Microsoft Windows の Embedded OpenType Font Engine における名前テーブルの処理に関する任意のコードを実行される脆弱性 Microsoft Windows の Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) には、データレコード内の名前テーブルの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0231 37662 CVE-2009-0231 47566 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001914.html 2009-07-14 2009-08-21 View