Attack (Attack ID:716009)

Release Date2016/09/08

Attack NameFILE Microsoft Windows Els.dll Insecure Library Loading -5 (CVE-2015-6128)

Severity

BUG ID

CVE ID

 

Description

An integer underflow vulnerability exists in the Uniscribe API set of Microsoft Windows. The vulnerability is due to a failure on part of Uniscribe to properly parse crafted fonts.
Impact:Remote code execution
Affected System:Windows
Additional References:CVE-2015-6128

 

Solution

Update vendor's patch.