Skip to content
OpenAdvisories
Unscored CVE-2015-1670 EUVD-2015-1800GHSA-9cj3-6fcw-36r3

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers…

Published May 13, 2015 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability."

References