CVE-2015-0092

Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…

published March 11, 2015

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

🚨 An attacker can execute arbitrary code just by visiting a malicious website or opening a crafted file! The Adobe Font Driver vulnerability is a sneaky little pest that you definitely don’t want around. 🔥 Think of it as a restaurant that serves food from unknown suppliers. If the chef accepts just any delivery without checking it, they might end up serving something dangerous that makes everyone sick. Similarly, this vulnerability lets attackers slip in harmful code through unverified sources. If exploited, this could lead to a complete system compromise, allowing attackers to gain remote control of affected Windows systems. They could read sensitive data, install malware, or even delete crucial files, leading to an absolute catastrophe for your network.

Put simply

Think of it as a restaurant that serves food from unknown suppliers. If the chef accepts just any delivery without checking it, they might end up serving something dangerous that makes everyone sick. Similarly, this vulnerability lets attackers slip in harmful code through unverified sources. This vulnerability resides in the Adobe Font Driver across multiple Windows versions, enabling remote code execution via specially crafted websites or files. Essentially, it bypasses normal security checks and allows malicious code to run unchecked.

What to do

If exploited, this could lead to a complete system compromise, allowing attackers to gain remote control of affected Windows systems. They could read sensitive data, install malware, or even delete crucial files, leading to an absolute catastrophe for your network. To mitigate this vulnerability, update your systems to the latest patches provided by Microsoft immediately. Additionally, consider restricting access to untrusted websites and files to reduce exposure to potential attacks. You've got this! By taking these steps, you'll be a security hero keeping your systems safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17414 · 97.1th percentile
Published
2015-03-11T10:00Z
EPSS history
Timeline
  • 11 MAR 10:00Z
    Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…
    cvelistv5