Remote code execution vulnerability in the kernel-mode driver in Microsoft Windows - CVE-2015-0059| ID: oval:org.secpod.oval:def:23497 | Date: (C)2015-02-11 (M)2021-09-11 |
| Class: VULNERABILITY | Family: windows |
The host is installed with Microsoft Windows 7 SP1, Server 2008 R2 SP1, Windows 8, 8.1, Server 2012 or Server 2012 R2 and is prone to a remote code execution vulnerability. A flaw is present in the application, which improperly handles TrueType fonts. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
| Platform: |
| Microsoft Windows 7 |
| Microsoft Windows Server 2008 R2 |
| Microsoft Windows 8 |
| Microsoft Windows 8.1 |
| Microsoft Windows Server 2012 |
| Microsoft Windows Server 2012 R2 |
