ZeroDay Findings
Sign inSign up

Findings

CVE-2015-1671

Microsoft Windows Remote Code Execution Vulnerability

Published May 13, 2015 · updated Jun 16, 2026 · microsoft .net framework

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

Timeline

Detection, updates, and resolution for this record.

  1. May 13, 2015 · Catalog

    Detected

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted True

  2. May 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted True

Required action

Apply updates per vendor instructions.

CISA due date Jun 15, 2022

Affected

  • cpe microsoft/.net framework3.0
  • cpe microsoft/.net framework3.5
  • cpe microsoft/.net framework3.5.1
  • cpe microsoft/.net framework4.0
  • cpe microsoft/.net framework4.5
  • cpe microsoft/.net framework4.5.1
  • cpe microsoft/.net framework4.5.2
  • cpe microsoft/live meeting2007
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2015-1671

    A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.

    cisa.gov
  • CVE.orgCVE-2015-1671

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-1671

    30-day exploitation probability 49.0%

    first.org
  • NIST NVDCVE-2015-1671

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and S

    nvd.nist.gov

References