Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka βOpenType Font Driver Vulnerability.β
Recent assessments:
gwillcox-r7 at November 23, 2020 6:12pm UTC reported:
Reported as exploited in the wild as part of Googleβs 2020 0day vulnerability spreadsheet they made available at <https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit#gid=1869060786>. Original tweet announcing this spreadsheet with the 2020 findings can be found at <https://twitter.com/maddiestone/status/1329837665378725888>
Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0
blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak
www.kb.cert.org/vuls/id/103336
www.securityfocus.com/bid/75951
www.securitytracker.com/id/1032991
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2426
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078
www.exploit-db.com/exploits/38222