Skip to content

CVE-2015-2432 ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind...

HighCVSS 9.3 EPSS 30.3% PoC
Published
Updated
Exploit status
Proof-of-concept only

Description

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability."

Affected products

ProductAffected versionsFixed in
Microsoft windows 7 All versions No fix listed
Microsoft windows 8 All versions No fix listed
Microsoft windows 8.1 All versions No fix listed
Microsoft windows rt All versions No fix listed
Microsoft windows rt 8.1 All versions No fix listed
Microsoft windows server 2008 All versions No fix listed
Microsoft windows server 2008 = r2-sp1 No fix listed
Microsoft Windows Server 2012 All versions No fix listed
Microsoft Windows Server 2012 = r2 No fix listed
Microsoft windows vista All versions No fix listed

References

  • 1033238 third-party-advisory vdb-entry
  • MS15-080 patch vendor-advisory
  • 37920 exploit third-party-advisory vdb-entry