PT-2015-2016

CVE-2015-2519

·

Published

2015-09-09

·

Updated

2019-05-14

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version
Description The issue is related to an integer overflow in Windows Journal, allowing remote attackers to execute arbitrary code via a crafted .jnt file. This can be exploited by a remote attacker using a specially formed JNT file, potentially leading to the execution of arbitrary code.
Recommendations For Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10, update to a version that includes the fix for the integer overflow in Windows Journal. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾