CVE-2017-0123

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0112

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03362)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

CVE-2017-0072

CVE-2017-0072 maps to a Uniscribe (USP10.dll) vulnerability in the Windows font handling path. Connected exploits show a heap memory corruption in USP10!MergeLigRecords triggered during text rendering with untrusted fonts, illustrating a remote code execution class. Public proofs-of-concept exist...

CVE-2017-0127

Technical details about CVE-2017-0127 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0083

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072,...

CVE-2017-0084

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Window...

CVE-2017-0083

CVE-2017-0083 involves Uniscribe (USP10.dll) in Windows Vista SP2, Server 2008 SP2/R2 SP1 and Windows 7 SP1, where a crafted web page can trigger remote code execution. Connected exploit reports tie the issue to Uniscribe font processing, notably USP10!MergeLigRecords, with heap memory corruption...

CVE-2017-0087

CVE-2017-0087 is a remote code execution vulnerability in Windows Uniscribe (USP10) affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Connected data show exploits targeting USP10!MergeLigRecords, with heap memory corruption in Uniscribe’s font processing triggere...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0090

CVE-2017-0090 is a real Uniscribe vulnerability in USP10 (Windows Uniscribe) where an invalid memory write in the MergeLigRecords function can be triggered by rendering text with a crafted font via API calls such as DrawText, leading to remote code execution. The connected Exploit-DB entries (e.g...

CVE-2017-0092

CVE-2017-0092 affects Uniscribe (usp10.dll) in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The vulnerability enables an attacker-controlled website to cause memory information disclosure from the affected process. The CVE entry lists a CVSS v3 base score of 4.3 (Medi...

CVE-2017-0126

CVE-2017-0126 is an Uniscribe (usp10.dll) information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue arises when untrusted or crafted web content triggers Uniscribe code paths via user32’s DrawText flow, enabling a remote attacke...

CVE-2017-0091

CVE-2017-0091 is an information-disclosure vulnerability in Microsoft Windows, affecting the Uniscribe (usp10.dll) font‑handling component used by DrawText and related text-rendering paths. The root cause is memory access issues in Uniscribe’s handling of complex TrueType/OpenType typography tabl...

CVE-2017-0124

Technical details for CVE-2017-0124 are not publicly available in the provided connected documents. The materials reference Uniscribe-related issues and related CVEs, but do not reveal affected software versions, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2017-0113

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

CVE-2017-0127

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

Microsoft Uniscribe Multiple Vulnerabilities (4013076)

This host is missing a critical security update according to Microsoft Bulletin MS17-011. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Uniscribe Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accoun...

Windows Uniscribe Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...