CVE-2015-1645
HighSummary
The vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Enhanced Metafile (EMF) image.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute malicious code, potentially leading to system compromise.
Recommendation
It is recommended to update systems to the latest versions and apply relevant security patches.
Other vulnerabilities in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 i R2 SP1, Windows 7 SP1
See all- CVE-2015-0096High
A vulnerability in Microsoft Windows systems allows local users to gain privileges via a malicious DLL in the current working directory. The issue occurs when accessing the icon of crafted shortcuts in Windows Explorer.
- CVE-2015-0008High
The UNC implementation in Microsoft Windows lacks server-to-client authentication, allowing remote attackers to execute arbitrary code by making crafted data available on a UNC share.
Original NVD description (English source)
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile (EMF) image, aka "EMF Processing Remote Code Execution Vulnerability."