Unrated severityNVD Advisory· Published Dec 9, 2015· Updated Jun 17, 2026

CVE-2015-6130

Description

Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer Underflow Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows 72 versions
cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
Microsoft/Windows Server 2008
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
Microsoft/Windowsllm-fuzzy
Range: 7 SP1, Server 2008 R2 SP1

Patches

Vulnerability mechanics

References

blogs.flexerasoftware.com/secunia-research/2015/12/vulnerability-in-microsofts-unicode-scripts-processor-allows-execution-of-arbitrary-code.htmlnvdExploitTechnical DescriptionThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034337nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-130nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.017
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000