CVE-2015-2519
HighSummary
Integer overflow in Windows Journal in various versions of Windows allows remote attackers to execute arbitrary code via a crafted .jnt file.
Risk Assessment
An attacker can exploit this vulnerability to remotely execute malicious code, potentially taking control of the system.
Recommendation
It is recommended to update the operating system to the latest version and avoid opening unknown .jnt files.
Other vulnerabilities in Windows Journal
See all- CVE-2016-0182High
The vulnerability in Windows Journal allows remote attackers to execute arbitrary code via a crafted Journal (.jnt) file. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511.
- CVE-2016-0038High
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file.
- CVE-2015-6097High
CVE-2015-6097 involves a heap-based buffer overflow in Windows Journal affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Remote attackers can execute arbitrary code via a crafted Journal (.jnt) file.
- CVE-2015-2530High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2015-2514High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2015-2513High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2014-1824High
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (.JNT) file.
Original NVD description (English source)
Integer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal Integer Overflow RCE Vulnerability."