9.3

CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Office Version2003 Updatesp3
Microsoft ≫ Office Version2007 Updatesp2
Microsoft ≫ Office Version2007 Updatesp3
Microsoft ≫ Office Version2010
Microsoft ≫ Office Version2010 Updatesp1
Microsoft ≫ Windows 7 Version- Updatesp1 Editionx64
Microsoft ≫ Windows 7 Version- Updatesp1 Editionx86
Microsoft ≫ Windows 8 Versionconsumer_preview
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Vista Version- Updatesp2
Microsoft ≫ Windows Xp Updatesp2
Microsoft ≫ Windows Xp Updatesp3
Microsoft ≫ Silverlight Version4.0.50401.0
Microsoft ≫ Silverlight Version4.0.50524.00
Microsoft ≫ Silverlight Version4.0.50826.0
Microsoft ≫ Silverlight Version4.0.50917.0
Microsoft ≫ Silverlight Version4.0.51204.0
Microsoft ≫ Silverlight Version4.0.60129.0
Microsoft ≫ Silverlight Version4.0.60310.0
Microsoft ≫ Silverlight Version4.0.60531.0
Microsoft ≫ Silverlight Version4.0.60831.0
Microsoft ≫ Silverlight Version4.1.10111.0
Microsoft ≫ Silverlight Version5.0.60401.0
Microsoft ≫ Silverlight Version5.0.60818.0 Updaterc
Microsoft ≫ Silverlight Version5.0.61118.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 69.52% 0.986
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C