Detections
Analytics
MS15-044: Vulnerabilities in Microsoft Font Drivers Could Allow Remote Code Execution (3057110)
high Nessus Plugin ID 83440
Language:
Synopsis
The remote Windows host is affected by multiple vulnerabilities.Description
The remote Windows host is affected by multiple vulnerabilities :- An information disclosure vulnerability exists due to improper handling of OpenType fonts by the Windows DirectWrite library. A remote attacker can exploit this vulnerability by convincing a user to open a file or visit a website containing a specially crafted OpenType font, resulting in the disclosure of sensitive information. (CVE-2015-1670)
- A remote code execution vulnerability exists due to improper handling of TrueType font files by the Windows DirectWrite library. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted document or visit a website containing a specially crafted TrueType font file, resulting in execution of arbitrary code in the context of the current user. (CVE-2015-1671)
Solution
Microsoft has released a set of patches for Windows 2003, Vista, 2008, 7, 2008 R2, 8, 2012, 8.1, and 2012 R2. Additionally, Microsoft has released a set of patches for Office 2007, Office 2010, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013, Lync Basic 2013; and .NET Framework 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-044
Plugin Details
Severity: High
ID: 83440
File Name: smb_nt_ms15-044.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 5/13/2015
Updated: 5/25/2022
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.0
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2015-1671
Vulnerability Information
CPE: cpe:/a:microsoft:lync_basic, cpe:/a:microsoft:.net_framework, cpe:/a:microsoft:live_meeting_console, cpe:/a:microsoft:silverlight, cpe:/a:microsoft:office, cpe:/a:microsoft:lync, cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/12/2015
Vulnerability Publication Date: 5/12/2015
CISA Known Exploited Vulnerability Due Dates: 6/15/2022
Reference Information
CVE: CVE-2015-1670, CVE-2015-1671