这表明攻击企图利用 Microsoft Windows 中的远程执行代码漏洞。该漏洞是由于用于 TrueType 字体的 Microsoft Windows 解析器中的错误造成的。攻击者可以通过特制文件在应用程序上下文中利用此执行任意代码。

Windows Vista Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for Itanium-based Systems Service Pack 2 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 Windows 8 for 32-bit Systems Windows 8 for x64-based Systems Windows 8.1 for 32-bit Systems Windows 8.1 for x64-based Systems Windows Server 2012 Windows Server 2012 R2 Windows RT Windows RT 8.1 Windows 10 for 32-bit Systems Windows 10 for 64-bit Systems Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 (Server Core installation) Windows Server 2012 R2 (Server Core installation) Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 2(32-bit editions) Microsoft Office 2010 Service Pack 2(64-bit editions) Microsoft Live Meeting 2007 Console Microsoft Lync 2010 (32-bit) Microsoft Lync 2010 (64-bit) Microsoft Lync 2010 Attendee(user level install) Microsoft Lync 2010 Attendee(admin level install) Microsoft Lync 2013 Service Pack 1 (32-bit)(Skype for Business) Microsoft Lync Basic 2013 Service Pack 1 (32-bit)(Skype for Business Basic) Microsoft Lync 2013 Service Pack 1 (64-bit)(Skype for Business) Microsoft Lync Basic 2013 Service Pack 1 (64-bit)(Skype for Business Basic) Microsoft Silverlight 5 Microsoft Silverlight 5 Developer Runtime

系统被入侵：远程攻击者可以控制易受攻击的系统。

应用供应商提供的最新升级或补丁。 https://technet.microsoft.com/library/security/MS15-080