Microsoft Windows Kernel-Mode Drivers Multiple Font Parsing Vulnerabilities

Last Update Date: 10 Jan 2013 Release Date: 12 Dec 2012 4794 Views

RISK: High Risk

TYPE: Operating Systems - Windows OS

OpenType Font Parsing Vulnerability
A remote code execution vulnerability exists in the way that affected components handle a specially crafted OpenType font file. The vulnerability could allow remote code execution if a user opens a specially crafted OpenType font file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
TrueType Font Parsing Vulnerability
A remote code execution vulnerability exists in the way that affected components handle a specially crafted TrueType font files. The vulnerability could allow remote code execution if a user opens a specially crafted TrueType font file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.