CVE-2015-1670
N/A
N/A
Summary
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability."
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044
- http://www.securityfocus.com/bid/74485
- http://www.securitytracker.com/id/1032281
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044
- http://www.securityfocus.com/bid/74485
- http://www.securitytracker.com/id/1032281
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.