CVE-2015-2459
HighSummary
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This is a different vulnerability than CVE-2015-2458 and CVE-2015-2461.
Risk Assessment
An attacker could exploit this vulnerability to remotely execute malicious code, potentially leading to system takeover or data leakage.
Recommendation
It is recommended to update operating systems to the latest versions and implement security measures that restrict the execution of unknown fonts.
Other vulnerabilities in Adobe Type Manager Library (ATMFD.DLL)
See all- CVE-2015-2506High
The Adobe Type Manager Library in Windows has a vulnerability that allows remote attackers to cause a system crash via a crafted OpenType font.
- CVE-2015-2458High
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font, known as 'OpenType Font Parsing Vulnerability'.
- CVE-2015-2432High
The Adobe Type Manager library in Windows contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows, including Vista, 7, 8, and Server 2008 and 2012.
Original NVD description (English source)
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2458 and CVE-2015-2461.