CVE-2015-6130

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."

Affected products

Uniscribe, Windows, Windows 7, Windows Server 2008 R2

Microsoft Windows 7

All versions

Microsoft Windows Server 2008

= R2

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

20.7% (97th percentile)

Weakness

CWE-189

NVD status

Modified

Published

2015-12-09