CVE-2015-6097 Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Jour...
HighCVSS 9.3
EPSS 20.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal (.jnt) file, aka "Windows Journal Heap Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
References
- 1034110 vdb-entry
- MS15-114 vendor-advisory
- 20151201 Microsoft Windows Journal Heap Overflow Vulnerability third-party-advisory