Microsoft Windows Uniscribe Font Parsing Engine Memory Corruption Vulnerability

Last Update Date: 14 Aug 2013 15:42 Release Date: 14 Aug 2013 3805 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

A remote code execution vulnerability exists in the Unicode Scripts Processor included in affected versions of Microsoft Windows. An attacker who successfully exploited this vulnerability could run arbitrary code as the current user.

Impact

Remote Code Execution

System / Technologies affected

Windows XP
Windows Server 2003

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/MS13-060

Vulnerability Identifier

CVE-2013-3181

Source

Microsoft