CVE-2014-6317 — Improper Validation of Array Index in Microsoft Windows Server 2008

CWE-129 — Improper Validation of Array Index4 documents3 sources
Severity
7.1HIGHNVD
EPSS
25.9%
top 3.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Windows Server 2008Microsoft Windows Server 2012
Timeline
PublishedNov 11
Latest updateMay 14

Description

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font, aka "Denial of Service in Windows Kernel Mode Driver Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-6gm6-7c9c-qr6g: Array index error in win32k↗2022-05-14
▶

🕵️Threat Intelligence

2
Talos
Microsoft Update Tuesday November 2014: Fixes for 3 0-day Vulnerabilities↗2014-11-11
▶
Talos
Microsoft Update Tuesday November 2014: Fixes for 3 0-day Vulnerabilities↗2014-11-11
▶