{"uuid": "13c5c27c-b459-4be9-ab80-834096e4e90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2426", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_078_atmfd_bof.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Eugene Ching\", \"Mateusz Jurczyk\", \"Cedric Halbronn\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a pool based buffer overflow in the atmfd.dll driver when parsing\\n            a malformed font. The vulnerability was exploited by the hacking team and disclosed in\\n            the July data leak. This module has been tested successfully on vulnerable builds of\\n            Windows 8.1 x64.\", \"disclosure_date\": \"2015-07-11\", \"fullname\": \"exploit/windows/local/ms15_078_atmfd_bof\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"MS15-078 Microsoft Windows Font Driver Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/ms15_078_atmfd_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"windows/local/ms15_078_atmfd_bof\", \"references\": [\"CVE-2015-2426\", \"CVE-2015-2433\", \"MSB-MS15-078\", \"MSB-MS15-080\", \"URL-https://github.com/vlad902/hacking-team-windows-kernel-lpe\", \"URL-https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2015/september/exploiting-cve-2015-2426-and-how-i-ported-it-to-a-recent-windows-8.1-64-bit/\", \"URL-https://code.google.com/p/google-security-research/issues/detail?id=369\", \"URL-https://code.google.com/p/google-security-research/issues/detail?id=480\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows 8.1 x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:11.433843Z"}