CVE-2015-6107
Microsoft Windows and Office - Remote Code Execution via Crafted Embedded Font
Title source: llmDescription
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10 Gold and 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034333
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034331
Patch, Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-128
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034332
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034336
Scores
EPSS
0.1825
EPSS Percentile
96.9%
Details
CWE
CWE-119
Status
published
Products (19)
microsoft/live_meeting
2007
microsoft/lync
2010
microsoft/lync
2013 sp1
microsoft/office
2007 sp3
microsoft/office
2010 sp2
microsoft/skype_for_business
2016
microsoft/windows_10
microsoft/windows_10
1511
microsoft/windows_7
microsoft/windows_8
... and 9 more
Published
Dec 09, 2015
Tracked Since
Feb 18, 2026