Microsoft Windows Uniscribe Remote Code Execution (MS16-147: CVE-2016-7274; CVE-2016-7274)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted ttf file.

Leave a Reply