CVE-2015-6130

CVE-2015-6130

EPSS 20.7%

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://blogs.flexerasoftware.com/secunia-research/2015/12/vulnerability-in-microsofts-unicode-scripts-processor-allows-execution-of-arbitrary-code.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-130 http://www.securitytracker.com/id/1034337