Microsoft Windows Embedded OpenType Font Engine Remote Code Execution Vulnerability

Microsoft Windows Embedded OpenType Font Engine Remote Code Execution Vulnerability

References:

Font Directory Entry Parsing Vulnerability In win32k.sys (Microsoft)
Font Embedding for the Web (Microsoft)
Microsoft Windows Homepage (Microsoft )
Nortel Enterprise Response to Microsoft Security Bulletin MS09-065 (Nortel Networks)
The OpenType Font File (Microsoft)
ASA-2009-503 MS09-065 Vulnerabilities in Windows Kernel-Mode Drivers Could Allow (Avaya)
Microsoft Security Bulletin MS09-065 (Microsoft)

Privacy Statement
Copyright 2010, SecurityFocus