PRIOn knowledge basePRION:CVE-2014-4148Remote code execution
8.5 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.421 Medium
EPSS
Percentile
97.2%
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka “TrueType Font Parsing Remote Code Execution Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| windows_7 | eq | - sp1 | |
| windows_server_2008 | eq | r2 sp1 | |
| windows_server_2012 | eq | 2.0.114 | |
| windows_vista | eq | - sp2 |
Related
8.5 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.421 Medium
EPSS
Percentile
97.2%