{"vulnerability": "cve-2015-2433", "sightings": [{"uuid": "217fa713-8fdd-4c8c-9597-34a3aa53636f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38222", "content": "", "creation_timestamp": "2015-09-17T00:00:00.000000Z"}, {"uuid": "3125804a-4558-41a4-b942-e8d34cc588c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "c163dac7-51ac-4868-8315-930779dee18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:38.000000Z"}, {"uuid": "c64fc24b-e354-4cd5-aae4-9036b0312ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_078_atmfd_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f8f72d9f-61f9-4791-8905-d48073a81fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-08-01T12:00:18.040531Z"}, {"uuid": "0c725c2b-b7de-441b-8a9d-cace7e004145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-08-02T00:00:57.737191Z"}, {"uuid": "a447de35-8a1c-4fda-aa32-49d1d6453676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-07-29T12:01:24.532601Z"}, {"uuid": "082cde45-b7fd-45a4-83ff-41607bbda3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-07-30T00:01:53.839522Z"}, {"uuid": "553f2568-e4c0-4f62-81c0-a9b3760f3293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2433", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_078_atmfd_bof.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Eugene Ching\", \"Mateusz Jurczyk\", \"Cedric Halbronn\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a pool based buffer overflow in the atmfd.dll driver when parsing\\n            a malformed font. The vulnerability was exploited by the hacking team and disclosed in\\n            the July data leak. This module has been tested successfully on vulnerable builds of\\n            Windows 8.1 x64.\", \"disclosure_date\": \"2015-07-11\", \"fullname\": \"exploit/windows/local/ms15_078_atmfd_bof\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"MS15-078 Microsoft Windows Font Driver Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/ms15_078_atmfd_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"windows/local/ms15_078_atmfd_bof\", \"references\": [\"CVE-2015-2426\", \"CVE-2015-2433\", \"MSB-MS15-078\", \"MSB-MS15-080\", \"URL-https://github.com/vlad902/hacking-team-windows-kernel-lpe\", \"URL-https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2015/september/exploiting-cve-2015-2426-and-how-i-ported-it-to-a-recent-windows-8.1-64-bit/\", \"URL-https://code.google.com/p/google-security-research/issues/detail?id=369\", \"URL-https://code.google.com/p/google-security-research/issues/detail?id=480\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows 8.1 x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:11.504134Z"}]}