Unscored CVE-2015-6130 EUVD-2015-6073GHSA-3vwx-56vp-x7gr

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code …

Published Dec 9, 2015 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."

References

MS15-130 vendor-advisory
http://blogs.flexerasoftware.com/secunia-research/2015/12/vulnerability-in-microsofts-unicode-scripts-processor-allows-execution-of-arbitrary-code.html
1034337 vdb-entry