← Back

CVE-2015-6106

nvd nist
Published: Dec 9, 2015Modified: May 6, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Affected (11)

Microsoft
7 products
Live Meeting
Lync
Office
Skype For Business
Windows Server 2008
Windows Vista
Word Viewer
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Live Meeting
Version 2007
Microsoft
Lync
Version 2010
Lync
Version 2010
Lync
Version 2013 sp1
Microsoft
Office
Version 2007 sp3
Office
Version 2010 sp2
Office
Version 2010 sp2
Skype For Business
Version 2016
Windows Server 2008
All versions
Windows Vista
All versions
Word Viewer
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.