Microsoft Windows Kernel '.fon' Font File Remote Code Execution Vulnerability

🗓️ 11 Oct 2011 00:00:00Reported by Symantec Security ResponseType

Microsoft Windows '.fon' Font File Remote Code Execution Vulnerability. Allows attackers to execute arbitrary code with kernel-level privileges by tricking victims into viewing a file on a remote network share

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2011-2003	13 Oct 201100:00	–	circl
Check Point Advisories	Portable Executable (PE) 16-bit File	11 Oct 201100:00	–	checkpoint_advisories
Check Point Advisories	Preemptive Protection against Microsoft Windows Kernel Font Library File Buffer Overrun (MS11-077; CVE-2011-2003)	11 Oct 201100:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Font Library File Buffer Overflow (CVE-2011-2003)	19 Mar 201200:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Font Library File Buffer Overflow - Ver2 (CVE-2011-2003)	16 Apr 201400:00	–	checkpoint_advisories
Check Point Advisories	Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)	28 Feb 201000:00	–	checkpoint_advisories
CVE	CVE-2011-2003	12 Oct 201101:00	–	cve
Cvelist	CVE-2011-2003	12 Oct 201101:00	–	cvelist
Exploit DB	Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)	13 Oct 201100:00	–	exploitdb
exploitpack	Microsoft Windows - .fon Kernel-Mode Buffer Overrun (PoC) (MS11-077)	13 Oct 201100:00	–	exploitpack

Source	Link
exploitshop	www.exploitshop.wordpress.com/2011/10/12/ms11-077-vulnerabilities-in-windows-kernel-mode-drivers-could-allow-remote-code-execution-2567053/
kb	www.kb.cert.org/vuls/id/619281

11 Oct 2011 00:00Current

0.1Low risk

Vulners AI Score0.1

EPSS0.49398