CVE-2015-1670

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability."

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/74485	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032281	Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044
http://www.securityfocus.com/bid/74485	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032281	Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:.net_framework:3.0:sp2::::::
	cpe:2.3:a:microsoft:.net_framework:3.5:::::::*
	cpe:2.3:a:microsoft:.net_framework:3.5.1:::::::*
	cpe:2.3:a:microsoft:.net_framework:4.0:::::::*
	cpe:2.3:a:microsoft:.net_framework:4.5:::::::*
	cpe:2.3:a:microsoft:.net_framework:4.5.1:::::::*
	cpe:2.3:a:microsoft:.net_framework:4.5.2:::::::*

History

21 Nov 2024, 02:25

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/74485 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/74485 - Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1032281 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1032281 - Third Party Advisory, VDB Entry
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044 -

Information

Published : 2015-05-13 10:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-1670

Mitre link : CVE-2015-1670

CVE.ORG link : CVE-2015-1670

JSON object : View

Products Affected

microsoft

.net_framework

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2015-1670", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2015-05-13T10:59:02.643", "references": [{"url": "http://www.securityfocus.com/bid/74485", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secure@microsoft.com"}, {"url": "http://www.securitytracker.com/id/1032281", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044", "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/bid/74485", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032281", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka \"OpenType Font Parsing Vulnerability.\""}, {"lang": "es", "value": "La librer\u00eda de Windows DirectWrite, utilizado en Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, y 4.5.2, permite a atacantes remotos obtener informaci\u00f3n sensible de la memoria de procesos a trav\u00e9s de una fuente OpenType manipulada en un sitio web, tambi\u00e9n conocido como 'vulnerabilidad del an\u00e1lisis sint\u00e1ctico de fuentes OpenType.'"}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D400E856-2B2E-4CEA-8CA5-309FDF371CEA"}, {"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688"}, {"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EDC4407-7E92-4E60-82F0-0C87D1860D3A"}, {"criteria": "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "792B417F-96A0-4E9D-9E79-5D7F982E2225"}, {"criteria": "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61FAD9EE-FA7F-4B39-8A9B-AFFAEC8BF214"}, {"criteria": "cpe:2.3:a:microsoft:.net_framework:4.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "299DBEAE-1829-47A9-B09E-4AF327831B69"}, {"criteria": "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40B3A045-B08A-44E0-91BE-726753F6A362"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}