CVE-2015-2458
HighSummary
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font, known as 'OpenType Font Parsing Vulnerability'.
Risk Assessment
An attacker can exploit this vulnerability to remotely execute malicious code, potentially leading to full system compromise. This poses a significant threat to the security of organizational data and infrastructure.
Recommendation
It is recommended to update operating systems to the latest versions that include security patches. Additionally, restrict the ability to open unknown OpenType fonts from untrusted sources.
Other vulnerabilities in Adobe Type Manager Library (ATMFD.DLL)
See all- CVE-2015-2506High
The Adobe Type Manager Library in Windows has a vulnerability that allows remote attackers to cause a system crash via a crafted OpenType font.
- CVE-2015-2459High
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This is a different vulnerability than CVE-2015-2458 and CVE-2015-2461.
- CVE-2015-2432High
The Adobe Type Manager library in Windows contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows, including Vista, 7, 8, and Server 2008 and 2012.
Original NVD description (English source)
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2459 and CVE-2015-2461.