CVE Catalog
CVE-2017-8691
HighSummary
Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts.
Risk Assessment
This vulnerability could lead to remote code execution, posing a significant security threat to organizational systems.
Recommendation
It is recommended to update systems to the latest versions and apply relevant security patches to mitigate the risk of exploitation of this vulnerability.
Other vulnerabilities in Windows font library
Original NVD description (English source)
Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka "Express Compressed Fonts Remote Code Execution Vulnerability."