Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2015-1671

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows DirectWrite library是美国微软（Microsoft）公司的一个文本布局和字体渲染API，它支持OpenType字体、GDI和Direct2D技术等。 多款Microsoft产品的Windows DirectWrite库中存在远程执行代码漏洞，该漏洞源于程序无法正确处理TrueType字体。成功利用此漏洞的攻击者可以完全控制受影响的系统。以下产品及版本受到影响：Microsoft Windows，.NET Framework 3.0 SP2版本，3.5版

AI Predicted 9.8 Difficulty: Easy KEV EPSS 54.63% · P99
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-1671

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows DirectWrite TrueType字体分析漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows DirectWrite library是美国微软（Microsoft）公司的一个文本布局和字体渲染API，它支持OpenType字体、GDI和Direct2D技术等。 多款Microsoft产品的Windows DirectWrite库中存在远程执行代码漏洞，该漏洞源于程序无法正确处理TrueType字体。成功利用此漏洞的攻击者可以完全控制受影响的系统。以下产品及版本受到影响：Microsoft Windows，.NET Framework 3.0 SP2版本，3.5版
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-1671

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-1671

请登录查看更多情报信息。

Vendor Advisories for CVE-2015-1671 (3)

Same Patch Batch · n/a · 2015-05-13 · 95 CVEs total

CVE-2015-3061 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3058 Adobe Reader和Acrobat 信息泄露漏洞
CVE-2015-3056 Adobe Reader和Acrobat 缓冲区溢出漏洞
CVE-2015-3052 Adobe Reader和Acrobat 缓冲区溢出漏洞
CVE-2015-3051 Adobe Reader和Acrobat 缓冲区溢出漏洞
CVE-2015-3050 Adobe Reader和Acrobat 缓冲区溢出漏洞
CVE-2015-3049 Adobe Reader和Acrobat 缓冲区溢出漏洞
CVE-2015-3048 Adobe Reader和Acrobat 缓冲区溢出漏洞
CVE-2015-3053 Adobe Reader和Acrobat 释放后重用漏洞
CVE-2015-3060 Adobe Reader和Acrobat 安全绕过漏洞
CVE-2015-3059 Adobe Reader和Acrobat 释放后重用漏洞
CVE-2015-3062 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3063 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3064 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3065 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3066 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3067 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3068 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3069 Adobe Reader和Acrobat 安全漏洞
CVE-2015-3070 Adobe Reader和Acrobat 缓冲区溢出漏洞

Showing top 20 of 95 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-1671

No comments yet

Leave a comment