bac2binary (6)

Last Login: April 15, 2020
Assessments
2
Score
6

bac2binary's Latest (2) Contributions

Sort by:
Filter by:
1
Ratings
  • Attacker Value
    Very Low
  • Exploitability
    Low
Gives privileged accessVulnerable in default configurationDifficult to weaponizeRequires user interaction
Technical Analysis

The attack complexity is very less, as the attacker needs to run a specially crafted application, either by gaining physical access or by social engineering in order to exploit this.

Patch: Released by Microsoft.

3
Ratings
  • Attacker Value
    Low
  • Exploitability
    Medium
Common in enterpriseVulnerable in default configurationNo useful access
Technical Analysis

Less impact on systems running windows 10 1703 and later, as all fonts are processed in user-mode app-container sandbox and successful exploitation gives limited privileges and capabilities within the sandbox.

Patch: Released by Microsoft.