CVE-2015-6107: Buffer Overflow
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10 Gold and 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6107?
CVE-2015-6107 has a critical severity rating due to potential remote code execution via crafted font files.
How do I fix CVE-2015-6107?
To fix CVE-2015-6107, apply the latest security updates released by Microsoft for the affected software products.
Which software is affected by CVE-2015-6107?
CVE-2015-6107 affects various Microsoft products, including Windows Vista, Windows 7, Windows 8, Windows 10, and several versions of Microsoft Office.
Can CVE-2015-6107 be exploited remotely?
Yes, CVE-2015-6107 can be exploited remotely if a user opens a malicious document containing a specially crafted font.
What types of attacks can CVE-2015-6107 facilitate?
CVE-2015-6107 can facilitate remote code execution attacks, allowing attackers to take control of affected systems.