CVE-2012-2556

Description

The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."

Related CPE's

omicrosoftwindows_server_2008*sp2x86*****

omicrosoftwindows_vista*sp2x64*****

omicrosoftwindows_server_2008*sp2itanium*****

omicrosoftwindows_server_2008r2*itanium*****

omicrosoftwindows_rt-*******

omicrosoftwindows_server_2008r2*x64*****

omicrosoftwindows_server_2008-sp2itanium*****

omicrosoftwindows_server_2008*r2x64*****

omicrosoftwindows_xp-sp2x64*****

omicrosoftwindows_7-*******

References

TA12-346A

US Government Resource

oval:org.mitre.oval:def:16067

MS12-078

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:M/Au:N/C:C/I:C/A:C

AccessVector

NETWORK

AccessComplexity

MEDIUM

Authentication

NONE

ConfidentialityImpact

COMPLETE

IntegrityImpact

COMPLETE

AvailabilityImpact

COMPLETE

BaseScore

9.300000190734863

Created by Yello
About Severity.io