Windows Uniscribe Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accoun...

Microsoft Windows Uniscribe CVE-2016-7274 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context of the currently logged-in user. Failed...

Microsoft Windows Uniscribe Remote Code Execution (MS16-147: CVE-2016-7274)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted ttf file...

KLA10921 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain priveleges. Below is a complete list of vulnerabilities: 1. Memory corruption vulnerabilit...

MS16-147: Security update for Microsoft Uniscribe: December 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if a user visits a specially crafted website or opens a specially crafted document.SummaryThis security update resolves a vulnerability in Windows Uniscribe. The vulnerability could allow remote code execution if a user...

December 13, 2016 — KB3205386 (OS Build 10586.713)

None None...

December 13, 2016 — KB3205383 (OS Build 10240.17202)

None None...

MS16-147: Security Update for Microsoft Uniscribe (3204063)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability by convincing a user to visit a speciall...

Microsoft Unicode Scripts Processor Arbitrary Code Execution Exploit

On the 8th December 2015, Microsoft released Security Bulletin MS15-130 to fix a vulnerability in Unicode Scripts Processor component found by Secunia Research. The vector for a successful exploitation is a specially crafted "True Type Font" TTF file, which typically can be embedded in e.g...

CVE-2015-6130

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."...

Integer overflow

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."...

CVE-2015-6130

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."...

CVE-2015-6130

CVE-2015-6130 is a Windows Uniscribe (USP10.DLL) vulnerability affecting Windows 7 SP1 and Windows Server 2008 R2 SP1. A specially crafted True Type Font (TTF) embedded in documents or web content can trigger an integer underflow in Uniscribe, allowing remote code execution. Microsoft issued MS15...

Microsoft Windows Uniscribe Remote Code Execution Vulnerability (3108670)

This host is missing a critical security update according to Microsoft Bulletin MS15-130. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Uniscribe CVE-2015-6130 Integer Underflow Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

KLA10714 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service or gain privileges. Below is a complete list of vulnerabilities 1. Improper requests parsing at Windows Domain Name System DNS can be exploited...

MS15-130: Security Update for Microsoft Uniscribe to Address Remote Code Execution (3108670)

The remote Windows host is affected by a remote code execution vulnerability due to improper parsing of fonts by Uniscribe. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted document or visit an untrusted website that contains specially crafted...

Microsoft Windows Uniscribe Integer Underflow (MS15-130: CVE-2015-6130)

An integer underflow vulnerability exists in Microsoft Windows Uniscribe. The vulnerability is due to an improper alignment of table offsets leading to an integer underflow. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted ttf file. Successful...

MS15-130: Security update for Microsoft Uniscribe to address remote code execution: December 8, 2015

None None...

KLA10011 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in a number of Microsoft products full list below. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. Vectors related to unknown vulnerabilities can...