CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-05-13
Microsoft DirectWrite TrueType Font Parsing Remote Code Execution Vulnerability (CVE-2015-1671, MS15-044)
[Affected Scope] Microsoft .NET Framework, Office 2007/2010, Lync 2010/2013, and Silverlight 5 utilizing the DirectWrite library
[Impact] Remote attackers can execute arbitrary code (RCE) with the privileges of the active user by tricking the system into rendering a specially crafted TrueType font
[Mitigation] Immediately apply the official Microsoft security updates (MS15-044) and restrict the loading of untrusted fonts via system policies