Lucene search

K
cve[email protected]CVE-2015-6130
HistoryDec 09, 2015 - 11:59 a.m.

CVE-2015-6130

2015-12-0911:59:00
CWE-189
web.nvd.nist.gov
71
cve
2015
6130
integer underflow
uniscribe
microsoft windows
windows 7
windows server 2008 r2
sp1
remote attackers
arbitrary code
crafted font
vulnerability

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.489 Medium

EPSS

Percentile

97.5%

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka “Windows Integer Underflow Vulnerability.”

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.489 Medium

EPSS

Percentile

97.5%