Skip to content
OpenAdvisories
Unscored CVE-2017-8691 EUVD-2017-17638GHSA-wwvx-xw8g-3vv3

Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font l…

Published Aug 8, 2017 · Updated Sep 16, 2024 · Assigned by microsoft

Description

Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka "Express Compressed Fonts Remote Code Execution Vulnerability."

Affected products

VendorProductAffectedFixed
Microsoft Windows Kernel-Mode Drivers Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 —

References