漏洞类别：Windows
漏洞等级： 
漏洞信息
- A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory.
- A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts.
- Multiple information disclosure vulnerabilities exist in the way that the Windows Graphics Device Interface (GDI) handles objects in memory.
- An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory.
- An elevation of privilege vulnerability exists in Windows when the Windows kernel fails to properly handle objects in memory.
This security update is rated Critical for all supported releases of Microsoft Windows. This security update is rated Important for affected editions of Microsoft Office 2007 and Microsoft Office 2010 affected editions of Skype for Business 2016, Microsoft Lync 2013, and Microsoft Lync 2010 affected editions of Microsoft .NET Framework affected editions of Silverlight.
漏洞危害
Successful exploitation allows remote code execution.
解决方案
0day
文章评论