Title

Microsoft Windows Uniscribe Remote Code Execution Vulnerability (MS16-147) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Windows Uniscribe. To exploit this vulnerability, an attacker would convince a user to open a specially crafted document, or convince a user to visit an untrusted webpage that contains embedded fonts. If successfully exploited, this vulnerability would allow an attacker to execute artbitrary code and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-72773

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.