cnvd - cnvd-2015-05278

cnvd-2015-05278

Vulnerability from cnvd

Title: Microsoft Windows TrueType Fonts远程代码执行漏洞（CNVD-2015-05278）

Description:

Microsoft Windows是微软公司推出的一系列操作系统。

Microsoft Windows TrueType Fonts存在远程代码执行漏洞。允许攻击者在易受攻击的应用程序的上下文中执行任意代码，或导致拒绝服务。

Severity: 高

Patch Name: Microsoft Windows OpenType Fonts远程代码执行漏洞（CNVD-2015-05278）的补丁

Patch Description:

Microsoft Windows是微软公司推出的一系列操作系统。

Microsoft Windows TrueType Fonts存在远程代码执行漏洞。允许攻击者在易受攻击的应用程序的上下文中执行任意代码，或导致拒绝服务。目前，厂商已经发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： http://technet.microsoft.com/security/bulletin/MS15-080

Reference: http://technet.microsoft.com/security/bulletin/MS15-080

Impacted products

Name
['Microsoft Windows Server 2008 R2 x64 SP1', 'Microsoft Windows Server 2008 for 32-bit Systems SP2', 'Microsoft Windows Server 2008 for Itanium-based Systems SP2', 'Microsoft Windows Server 2008 for x64-based Systems SP2', 'Microsoft Windows 7 for 32-bit Systems SP1', 'Microsoft Windows 7 for x64-based Systems SP1', 'Microsoft Office 2007 SP3', 'Microsoft Silverlight 5.0', 'Microsoft Lync 2010 Attendee 0', 'Microsoft Windows Vista Service Pack 2 0']

Name

['Microsoft Windows Server 2008 R2 x64 SP1', 'Microsoft Windows Server 2008 for 32-bit Systems SP2', 'Microsoft Windows Server 2008 for Itanium-based Systems SP2', 'Microsoft Windows Server 2008 for x64-based Systems SP2', 'Microsoft Windows 7 for 32-bit Systems SP1', 'Microsoft Windows 7 for x64-based Systems SP1', 'Microsoft Office 2007 SP3', 'Microsoft Silverlight 5.0', 'Microsoft Lync 2010 Attendee 0', 'Microsoft Windows Vista Service Pack 2 0']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "76238"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-2435"
    }
  },
  "description": "Microsoft Windows\u662f\u5fae\u8f6f\u516c\u53f8\u63a8\u51fa\u7684\u4e00\u7cfb\u5217\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows TrueType Fonts\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u5141\u8bb8\u653b\u51fb\u8005\u5728\u6613\u53d7\u653b\u51fb\u7684\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u6216\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "KeenTeam\u0027s Jihui Lu and Peter Hlavaty, working with HP\u00e2??s Zero Day Initiative",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://technet.microsoft.com/security/bulletin/MS15-080",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-05278",
  "openTime": "2015-08-14",
  "patchDescription": "Microsoft Windows\u662f\u5fae\u8f6f\u516c\u53f8\u63a8\u51fa\u7684\u4e00\u7cfb\u5217\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows TrueType Fonts\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u5141\u8bb8\u653b\u51fb\u8005\u5728\u6613\u53d7\u653b\u51fb\u7684\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u6216\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Windows OpenType  Fonts\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2015-05278\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows Server 2008 R2 x64 SP1",
      "Microsoft Windows Server 2008 for 32-bit Systems SP2",
      "Microsoft Windows Server 2008 for Itanium-based Systems SP2",
      "Microsoft Windows Server 2008 for x64-based Systems SP2",
      "Microsoft Windows 7 for 32-bit Systems SP1",
      "Microsoft Windows 7 for x64-based Systems SP1",
      "Microsoft Office 2007 SP3",
      "Microsoft Silverlight 5.0",
      "Microsoft Lync 2010 Attendee 0",
      "Microsoft Windows Vista Service Pack 2 0"
    ]
  },
  "referenceLink": "http://technet.microsoft.com/security/bulletin/MS15-080",
  "serverity": "\u9ad8",
  "submitTime": "2015-08-12",
  "title": "Microsoft Windows TrueType Fonts\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2015-05278\uff09"
}

CVE-2015-2435 (GCVE-0-2015-2435)

Vulnerability from cvelistv5

Published

2015-08-15 00:00

Modified

2024-08-06 05:17

Severity ?

CWE

Summary

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Silverlight before 5.1.40728 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

References

▼	URL	Tags
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080	vendor-advisory, x_refsource_MS
	http://www.securitytracker.com/id/1033238	vdb-entry, x_refsource_SECTRACK
	http://www.zerodayinitiative.com/advisories/ZDI-15-387	x_refsource_MISC
	http://www.securityfocus.com/bid/76238	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:26.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MS15-080",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080"
          },
          {
            "name": "1033238",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033238"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-387"
          },
          {
            "name": "76238",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76238"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Silverlight before 5.1.40728 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "MS15-080",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080"
        },
        {
          "name": "1033238",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033238"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-387"
        },
        {
          "name": "76238",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76238"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2015-2435",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Silverlight before 5.1.40728 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka \"TrueType Font Parsing Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MS15-080",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080"
            },
            {
              "name": "1033238",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033238"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-387",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-387"
            },
            {
              "name": "76238",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76238"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2015-2435",
    "datePublished": "2015-08-15T00:00:00",
    "dateReserved": "2015-03-19T00:00:00",
    "dateUpdated": "2024-08-06T05:17:26.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted