Vulnerability Details CVE-2015-6097
Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal (.jnt) file, aka "Windows Journal Heap Overflow Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.388
EPSS Ranking 97.1%
CVSS Severity
CVSS v2 Score 9.3
References
- http://www.securitytracker.com/id/1034110
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-114
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1207
- http://www.securitytracker.com/id/1034110
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-114
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1207
Products affected by CVE-2015-6097
-
cpe:2.3:o:microsoft:windows_7:-
-
cpe:2.3:o:microsoft:windows_server_2008:-
-
cpe:2.3:o:microsoft:windows_server_2008:r2
-
cpe:2.3:o:microsoft:windows_vista:-