CVE-2012-4786

Description

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."

Related CPE's

omicrosoftwindows_xp*sp2******

omicrosoftwindows_server_2008r2*******

omicrosoftwindows_7gold*******

omicrosoftwindows_xp*sp3******

omicrosoftwindows_server_2008r2sp1******

omicrosoftwindows_7-sp1******

omicrosoftwindows_server_2003*sp2******

omicrosoftwindows_vista*sp2******

omicrosoftwindows_server_2008*sp2******

References

TA12-346A

US Government Resource

oval:org.mitre.oval:def:15845

MS12-078

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:L/Au:N/C:C/I:C/A:C

AccessVector

NETWORK

AccessComplexity

LOW

Authentication

NONE

ConfidentialityImpact

COMPLETE

IntegrityImpact

COMPLETE

AvailabilityImpact

COMPLETE

BaseScore

10

Created by Yello
About Severity.io