CVE-2020-1355 – A remote code execution vulnerability exists when the Windows Font Driver

A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Windows Font Driver Host handles memory., aka ‘Windows Font Driver Host Remote Code Execution Vulnerability’.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1355

Reference (s):

• https://www.zerodayinitiative.com/advisories/ZDI-20-875/
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1355
• URL: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1355