cbcvebase.
CVE-2020-1408
published 2020-07-14

CVE-2020-1408: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.

Affected

74 ranges· showing 25
VendorProductVersion rangeFixed in
debiannagios4< nagios4 4.3.4-4 (bookworm)nagios4 4.3.4-4 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows
microsoftwindows_10
microsoftwindows_10
microsoftwindows_10

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv4.9MEDIUM