NVD

Id
47567  
Name
CVE-2009-0232  
Description
Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka "Embedded OpenType Font Integer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-15  
Modified Date
2010-08-21  
Seq
2009-0232  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238372 47567 CVE-2009-0232 oval:org.mitre.oval:def:5678  View
238373 47567 CVE-2009-0232 MS09-029  View
238374 47567 CVE-2009-0232 1022543  View
238375 47567 CVE-2009-0232 TA09-195A  View
238376 47567 CVE-2009-0232 ADV-2009-1887  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40909 JVNDB-2009-001915 Microsoft Windows の Embedded OpenType Font Engine における名前テーブルの処理に関する任意のコードを実行される脆弱性 Microsoft Windows の Embedded OpenType (EOT) Font Engine には、名前テーブルの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0232 37663 CVE-2009-0232 47567 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001915.html 2009-07-14 2009-08-21 View