CVE-2017-0014

Related Files

Microsoft Windows LoadUvsTable() / LoadFont() Overflows

Posted May 23, 2017

Authored by Hossein Lotfi | Site secunia.com

Secunia Research has discovered multiple vulnerabilities in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. An error within the "LoadUvsTable()" function can be exploited to cause a heap-based buffer overflow via a font file containing specially crafted Unicode Variation Sequences tables. An integer overflow error within the "LoadFont()" function can be exploited to cause a heap-based buffer overflow via a font file containing specially crafted Unicode Variation Sequences tables. Successful exploitation of the vulnerabilities allows execution of arbitrary code.

tags | advisory, overflow, arbitrary, vulnerability

systems | windows

advisories | CVE-2017-0014

SHA-256 | 6171c4189358444433b6d183844713287c38ff36227d913c707846f7d310476c

Download | Favorite | View