CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
90.3%
DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unicode characters, which allows remote attackers to cause a denial of service (application hang) via a (1) instant message or (2) web site, aka “DirectWrite Application Denial of Service Vulnerability.”
Vendor | Product | Version | CPE |
---|---|---|---|
microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:* |
microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:* |
microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:* |
microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:* |
microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* |
microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:* |
microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:* |
microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:* |
microsoft | windows_vista | * | cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* |