CVE-2015-2506
HighSummary
The Adobe Type Manager Library in Windows has a vulnerability that allows remote attackers to cause a system crash via a crafted OpenType font.
Risk Assessment
This vulnerability can lead to remote denial of service, affecting the availability of services within the organization.
Recommendation
It is recommended to update operating systems to the latest versions and to monitor and restrict the use of unknown OpenType fonts.
Other vulnerabilities in Adobe Type Manager Library (atmfd.dll)
See all- CVE-2015-2459High
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This is a different vulnerability than CVE-2015-2458 and CVE-2015-2461.
- CVE-2015-2458High
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font, known as 'OpenType Font Parsing Vulnerability'.
- CVE-2015-2432High
The Adobe Type Manager library in Windows contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows, including Vista, 7, 8, and Server 2008 and 2012.
Original NVD description (English source)
atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to cause a denial of service (system crash) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability."