CVE-2015-1670

CVE-2015-1670 describes an information disclosure vulnerability in the Windows DirectWrite library, affecting multiple versions of Microsoft .NET Framework. A remote attacker could exploit this by enticing a user to visit a website hosting a crafted OpenType font, leading to sensitive information disclosure from process memory. With a CVSS score of 4.3, it is considered medium severity, requiring user interaction (AC:M) but not authentication (Au:N) for a network-based attack (AV:N) to achieve partial confidentiality impact (C:P). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.