CVE-2014-6317
HighSummary
Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font.
Risk Assessment
This vulnerability may lead to service interruptions, affecting the continuity of operations within the organization.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor systems for unauthorized attempts to exploit this flaw.
Other vulnerabilities in win32k.sys
See all- CVE-2015-2527High
The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
- CVE-2015-2366High
The vulnerability in win32k.sys in the kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted application.
- CVE-2015-2365High
The vulnerability in win32k.sys in kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted application.
- CVE-2015-2363High
The vulnerability in win32k.sys in the kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted application.
- CVE-2015-1768High
The vulnerability in win32k.sys in kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain elevated privileges or cause a denial of service via a crafted application.
- CVE-2015-0078High
The win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 has a vulnerability that improperly validates the token of a calling thread. This allows local users to gain privileges via a crafted application.
- CVE-2015-0058High
A double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application.
- CVE-2015-0057High
The vulnerability in win32k.sys allows local users to gain elevated privileges through a crafted application. It affects various versions of Microsoft Windows operating systems, including Windows Server 2003, Windows Vista, Windows 7, and Windows 8.
- CVE-2014-1819High
The vulnerability in win32k.sys in kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted font file.
- CVE-2014-0318High
In Windows systems, win32k.sys in kernel-mode drivers does not properly control access to thread-owned objects, allowing local users to gain elevated privileges via a crafted application.
Original NVD description (English source)
Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font, aka "Denial of Service in Windows Kernel Mode Driver Vulnerability."