(Pwn2Own) Microsoft Windows PFFOBJ::bDeleteLoadRef Font Use-After-Free Privilege Escalation Vulnerability

🗓️ 10 May 2016 00:00:00Reported by Tencent PC ManagerType

zdi🔗 www.zerodayinitiative.com👁 47 Views

Microsoft Windows PFFOBJ::bDeleteLoadRef Font Use-After-Free Privilege Escalation Vulnerability allows local attackers to execute arbitrary code with a font handling flaw

Reporter	Title	Published	Views	Family All 19
BDU FSTEC	The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information about the addresses of kernel objects and bypass the KASLR security mechanisms.	31 May 201600:00	–	bdu_fstec
CNVD	Microsoft Windows Win32k Information Leakage Vulnerability	11 May 201600:00	–	cnvd
Check Point Advisories	Microsoft Windows Information Disclosure (CVE-2016-0175)	16 Dec 202000:00	–	checkpoint_advisories
CVE	CVE-2016-0175	11 May 201601:00	–	cve
Cvelist	CVE-2016-0175	11 May 201601:00	–	cvelist
EUVD	EUVD-2016-0213	7 Oct 202500:30	–	euvd
Microsoft KB	MS16-062: Description of the security update for Windows Kernel-Mode Drivers: May 10, 2016	10 May 201607:00	–	mskb
Microsoft KB	Cumulative Update for Windows 10: May 10, 2016	10 May 201607:00	–	mskb
Microsoft KB	Cumulative Update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: May 10, 2016	10 May 201607:00	–	mskb
Microsoft KB	MS16-062: Security update for kernel mode drivers: May 10, 2016	10 May 201600:00	–	mskb