7.2

CVE-2007-1213

The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 2000 Updatesp4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4% 0.892
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

http://www.securityfocus.com/archive/1/466186/100/200/threaded
Third Party Advisory
Broken Link
VDB Entry
http://www.vupen.com/english/advisories/2007/1215
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017
Patch
Vendor Advisory
http://www.securityfocus.com/bid/23276
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id?1017845
Third Party Advisory
Broken Link
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1797
Broken Link