Product:
Adobe Type Manager Font Driver
Summary
ATMFD.DLL in the Adobe Type Manager Font Driver allows local users to gain privileges via a crafted application. This vulnerability affects multiple versions of Microsoft Windows, including Windows Server 2003 SP2, Windows Vista SP2, and Windows 8.1. It is known as the ATMFD.DLL Memory Corruption Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2015-2387 |
Exploitation
To exploit this vulnerability, an attacker must create a specially crafted application that targets the ATMFD.DLL component. Once executed by a local user, the application can lead to memory corruption, allowing the attacker to escalate privileges on the affected system. This requires local access to the machine, making it critical for users to be cautious about the applications they run.
Affected Products
- Windows Server 2003 SP2: Affected by memory corruption vulnerability in ATMFD.DLL.
- Windows Vista SP2: Vulnerable to privilege escalation through crafted applications.
- Windows Server 2008 SP2 and R2 SP1: Exposed to the same memory corruption issues.
- Windows 7 SP1: Can be exploited via specially crafted applications targeting ATMFD.DLL.
- Windows 8 and 8.1: Vulnerable to local privilege escalation through this vulnerability.
- Windows Server 2012 Gold and R2: Affected by the ATMFD.DLL memory corruption vulnerability.
- Windows RT Gold and 8.1: Also susceptible to exploitation through crafted applications.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Regularly updating systems can help protect against known vulnerabilities and reduce the risk of exploitation.