CVE-2015-2432
HighSummary
The Adobe Type Manager library in Windows contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows, including Vista, 7, 8, and Server 2008 and 2012.
Risk Assessment
An attacker could exploit this vulnerability to remotely execute malicious software, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update the operating system to the latest version and apply the relevant security patches provided by Microsoft.
Other vulnerabilities in Adobe Type Manager Library (ATMFD.DLL)
See all- CVE-2015-2506High
The Adobe Type Manager Library in Windows has a vulnerability that allows remote attackers to cause a system crash via a crafted OpenType font.
- CVE-2015-2459High
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This is a different vulnerability than CVE-2015-2458 and CVE-2015-2461.
- CVE-2015-2458High
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font, known as 'OpenType Font Parsing Vulnerability'.
Original NVD description (English source)
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability."