CVE-2015-2462

CRÍTICO 9.3CVE-2015-2462 · Published 15/08/2015 · updated 17/06/2026

En resumen

CVE-2015-2462 es una vulnerabilidad CRÍTICO (CVSS 9.3) que afecta a .net framework (microsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 35.6%, mayor que el 98.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
.net framework microsoft	`= 3.0= 3.5= 3.5.1= 4.0= 4.5= 4.5.1= 4.5.2= 4.6`	No fix yet

Description

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability."

References

securityfocus.com/bid/76215 · Third Party Advisory
securitytracker.com/id/1033238 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 · Patch
exploit-db.com/exploits/37916 · Exploit

Más vulnerabilidades de .net framework

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

.net framework

microsoft

= 3.0= 3.5= 3.5.1= 4.0= 4.5= 4.5.1= 4.5.2= 4.6

No fix yet

Description

Más vulnerabilidades de .net framework

Ver todo →