CVE-2015-1671

Name: CVE-2015-1671
Creator: NVD / NIST
Published: 2015-05-13T10:59:03.91+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.8/10Actively ExploitedEPSS 54.63%

Last modified Jun 17, 2026

CVE-2015-1671 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability.". CISA has confirmed active exploitation in the wild. EPSS estimates a 54.63% chance of exploitation in the next 30 days.

Description

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

Metrics

CVSS 3.1

7.8/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Probability

54.63%

98.9th percentile

Probability of exploitation in the next 30 days. Learn more

Exploitation Status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by Jun 15, 2022.

Affected Software

Vendor	Product	Versions	Update
Microsoft	.Net Framework	3.0	Sp2
Microsoft	.Net Framework	4.0	—
Microsoft	.Net Framework	4.5	—
Microsoft	.Net Framework	4.5.1	—
Microsoft	.Net Framework	4.5.2	—
Microsoft	.Net Framework	3.5.1	—
Microsoft	.Net Framework	3.5	—
Microsoft	Live Meeting	2007	—
Microsoft	Lync	2010	—
Microsoft	Lync	2013	Sp1
Microsoft	Silverlight	5.0	—

References

http://www.securityfocus.com/bid/74490Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032281Broken Link, Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044Patch, Vendor Advisory
http://www.securityfocus.com/bid/74490Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032281Broken Link, Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044Patch, Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1671US Government Resource

Timeline

Published: May 13, 2015
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2015-1671?

How severe is CVE-2015-1671?

CVE-2015-1671 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 54.63% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.

How do I fix CVE-2015-1671?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-1671?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST