CVE-2010-0018

 

Published at: - 13-01-2010 08:30

Last modified: - 14-11-2022 06:02

Total changes: - 2

Description

Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka "Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• http://blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulnerability.aspx
• TA10-012B-US Government Resource
• 37671-
• ADV-2010-0095-Vendor Advisory
• 35457-Vendor Advisory
• 1023432-
• 61651-
• oval:org.mitre.oval:def:8324-
• MS10-001-

 

Keywords

NVD

 

CVE-2010-0018

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures