Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-2458
HistoryAug 15, 2015 - 12:59 a.m.

CVE-2015-2458

2015-08-1500:59:17
CWE-20
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.384 Low

EPSS

Percentile

97.3%

JSON

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka “OpenType Font Parsing Vulnerability,” a different vulnerability than CVE-2015-2459 and CVE-2015-2461.

Affected configurations

NVD
Node
microsoftwindows_10Match-
OR
microsoftwindows_7Match-sp1
OR
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rtMatch-
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1itanium
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_vistaMatch-sp2

Related

prion 3
cve 3
cvelist 3
nvd 2
symantec 3
exploitpack 1
checkpoint_advisories 3
zdt 3
exploitdb 1
seebug 1
openvas 1
nessus 1
mskb 1
kaspersky 1
securityvulns 1
prion
prion
Design/Logic Flaw
2015-08-15 00:59:00
Design/Logic Flaw
2015-08-15 00:59:00
Design/Logic Flaw
2015-08-15 00:59:00
cve
cve
CVE-2015-2461
2015-08-15 00:59:20
CVE-2015-2459
2015-08-15 00:59:18
CVE-2015-2458
2015-08-15 00:59:17
cvelist
cvelist
CVE-2015-2458
2015-08-15 00:00:00
CVE-2015-2459
2015-08-15 00:00:00
CVE-2015-2461
2015-08-15 00:00:00
nvd
nvd
CVE-2015-2461
2015-08-15 00:59:20
CVE-2015-2459
2015-08-15 00:59:18
symantec
symantec
Microsoft Windows OpenType Fonts CVE-2015-2461 Remote Code Execution Vulnerability
2015-08-11 00:00:00
Microsoft Windows OpenType Fonts CVE-2015-2458 Remote Code Execution Vulnerability
2015-08-11 00:00:00
Microsoft Windows OpenType Fonts CVE-2015-2459 Remote Code Execution Vulnerability
2015-08-11 00:00:00
exploitpack
exploitpack
Microsoft Windows Kernel - ATMFD.DLL Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table
2017-06-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2461)
2015-08-11 00:00:00
Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2458)
2015-08-11 00:00:00
Microsoft Windows OpenType Font Parsing Remote Code Execution (MS15-080: CVE-2015-2459)
2015-08-11 00:00:00
zdt
zdt
Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads Exploit
2015-08-21 00:00:00
Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table Exploit
2015-08-21 00:00:00
Windows ATMFD.DLL CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access Exploit
2015-08-21 00:00:00
exploitdb
exploitdb
Microsoft Windows Kernel - 'ATMFD.DLL' Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table
2017-06-23 00:00:00
seebug
seebug
Windows Kernel ATMFD.DLL out-of-bounds read due to malformed Name INDEX in the CFF table(CVE-2017-8483)
2017-06-27 00:00:00
openvas
openvas
Microsoft Graphics Component Remote Code Executioon Vulnerabilities (3078662)
2015-08-12 00:00:00
nessus
nessus
MS15-080 : Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3078662)
2015-08-12 00:00:00
mskb
mskb
MS15-080: Vulnerabilities in Microsoft graphics component could allow remote code execution: August 11, 2015
2015-08-11 00:00:00
kaspersky
kaspersky
KLA10646 Multiple vulnerabilities in Microsoft Windows
2015-08-11 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.384 Low

EPSS

Percentile

97.3%

JSON
Related for NVD:CVE-2015-2458
prion3cve3cvelist3nvd2symantec3exploitpack1checkpoint_advisories3zdt3exploitdb1seebug1openvas1nessus1mskb1kaspersky1securityvulns1