Login Request a demo
Unscored severity · published Dec 9, 2015
CVE-2015-6106
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1,…
–
CVSS
17.3%
EPSS
No
On KEV
Description
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)17.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2007; 2010; 2010 · source: NVD
LM
Live Meeting · Microsoft
2007 · source: NVD
LY
Lync · Microsoft
2010; 2010; 2013 · source: NVD
SF
Skype For Business · Microsoft
2016 · source: NVD
WS
Windows Server 2008 · Microsoft
All versions, or not specified · source: NVD
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
WV
Word Viewer · Microsoft
All versions, or not specified · source: NVD
Affected product
OF
Office
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6106
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6106
www.securitytracker.com
http://www.securitytracker.com/id/1034331
www.securitytracker.com
http://www.securitytracker.com/id/1034332
www.securitytracker.com
http://www.securitytracker.com/id/1034333
www.securitytracker.com
http://www.securitytracker.com/id/1034336
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-128
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability