Lucene search

K
cveMicrosoftCVE-2015-2508
HistorySep 09, 2015 - 12:59 a.m.

CVE-2015-2508

2015-09-0900:59:21
CWE-264
microsoft
web.nvd.nist.gov
37
adobe
type manager library
microsoft windows 10
local users
privileges
crafted application
font driver
elevation of privilege
vulnerability
cve-2015-2508
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

32.8%

The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application, aka “Font Driver Elevation of Privilege Vulnerability.”

Affected configurations

Nvd
Node
microsoftwindows_10Match-x64
OR
microsoftwindows_10Match-x86
VendorProductVersionCPE
microsoftwindows_10-cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
microsoftwindows_10-cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

32.8%