CVE-2015-6106
Last modified
CVE-2015-6106 is a vulnerability of currently unknown severity. The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability.". EPSS estimates a 17.32% chance of exploitation in the next 30 days.
Description
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Live Meeting | 2007 | — |
| Microsoft | Lync | 2010 | — |
| Microsoft | Lync | 2013 | Sp1 |
| Microsoft | Office | 2007 | Sp3 |
| Microsoft | Office | 2010 | Sp2 |
| Microsoft | Skype For Business | 2016 | — |
| Microsoft | Word Viewer | All versions | — |
| Microsoft | Windows Server 2008 | All versions | Sp2 |
| Microsoft | Windows Vista | All versions | Sp2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-6106?
How severe is CVE-2015-6106?
How do I fix CVE-2015-6106?
Are you affected by CVE-2015-6106?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST