"MS.Windows.Uniscribe.TTF.File.Remote.Code.Execution"

特征库ID：
43671
漏洞级别：
high
CVE ID：
CVE-2017-0014
建议的动作：
drop
受影响的系统：
Windows
协议：
tcp

攻击漏洞描述

这表明攻击企图利用 Microsoft Windows 中的远程执行代码漏洞。该漏洞是由于易受攻击的软件在处理恶意制作的 truetype 字体文件时发生的错误造成的。远程攻击者可能能够利用此漏洞通过精心制作的 truetype 字体文件在应用程序上下文中执行任意代码。

影响范围

Windows 7 for 32-bit Systems Service Pack 1 (4010095) Windows 7 for 32-bit Systems Service Pack 1 (4010098) Windows 7 for x64-based Systems Service Pack 1 (4010095) Windows 7 for x64-based Systems Service Pack 1 (4010098) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (4010095) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (4010098) Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (4010095) Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (4010098) Windows 8.1 for 32-bit Systems (4010096) Windows 8.1 for 32-bit Systems (4010099) Windows 8.1 for x64-based Systems (4010096) Windows 8.1 for x64-based Systems (4010099) Windows Server 2012 (4010097) Windows Server 2012 (4010100) Windows Server 2012 R2 (4010096) Windows Server 2012 R2 (4010099) Windows RT 8.1[2] (4010099) Windows 10 for 32-bit Systems (4009982) Windows 10 for x64-based Systems (4009982) Windows 10 Version 1511 for 32-bit Systems (4009983) Windows 10 Version 1511 for x64-based Systems (4009983) Windows 10 Version 1607 for 32-bit Systems (3217574) Windows 10 Version 1607 for x64-based Systems (3217574) Windows Server 2016 for x64-based Systems (3217574) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (4010095) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (4010098) Windows Server 2012 (Server Core installation) (4010097) Windows Server 2012 (Server Core installation) (4010100) Windows Server 2012 R2 (Server Core installation) (4010096) Windows Server 2012 R2 (Server Core installation) (4010099) Windows Server 2016 for x64-based Systems (Server Core installation) (3217574)