• info
• discussion
• exploit
• solution
• references

Microsoft Windows TrueType Font Engine CVE-2012-0159 Remote Code Execution Vulnerability

Solution:
The vendor released an advisory and updates. Please see the references for details.


Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Security Update for Windows Server 2008 (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=360adbed-a451 -44ed-8675-ca5624ef1cf3


• Microsoft Security Update for Windows Server 2008 (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=47a0df29-f42e -463b-9c15-a93385ff8705


• Microsoft Security Update for Windows Server 2008 (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=278c378b-6ee4 -4f80-b9c3-ede885f4bbda


• Microsoft Security Update for Windows Server 2008 (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=728a84b9-c1b8 -46e2-8365-1b542963508a

Microsoft .NET Framework 4.0

• Microsoft Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, an
  http://www.microsoft.com/downloads/details.aspx?familyid=4ee3cb61-542e -4e42-aa0e-0cbf8dd89648

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=9a4db1b4-15b2 -4fae-83c4-a86331425c9e


• Microsoft Security Update for Windows XP (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2ea7a8d-a537 -441c-8e80-2ba4ac37e320


• Microsoft Security Update for Windows XP (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=8d341077-8fcd -4666-a27e-2141a04a321e


• Microsoft Security Update for Windows XP (KB2686509)
  http://www.microsoft.com/downloads/details.aspx?familyid=954e8ae9-9247 -496a-bbde-76981c49e3b3

Microsoft Windows 7 for 32-bit Systems 0

• Microsoft Security Update for Windows 7 (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=f4d52649-4afc -4c01-b275-93818152f6b7


• Microsoft Security Update for Windows 7 (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=31607fd8-fae8 -47a0-971e-0e68be67fb5a


• Microsoft Security Update for Windows 7 (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=35443cfc-0f51 -412a-a9d9-91bfb19d805e


• Microsoft Security Update for Windows 7 (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=572af8d4-effb -41a6-8448-7576b03f18fd

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=6ebaccbc-512b -4f2f-bf2a-8958f012e13f


• Microsoft Security Update for Windows XP x64 Edition (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=e0357165-4400 -40a6-a7a4-7b762a1793ba


• Microsoft Security Update for Windows XP x64 Edition (KB2686509)
  http://www.microsoft.com/downloads/details.aspx?familyid=f3b1568f-d7ad -4e6e-b45b-53b16b303d9d

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=c65df271-8b7d -46d3-81b3-87c0ad05e8d0


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=11da5031-1733 -43ea-9204-294eb483c858

Microsoft Windows 7 for x64-based Systems 0

• Microsoft Security Update for Windows 7 for x64-based Systems (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=7aa0b61b-b42c -4d60-8a7f-c61cbd25d6d9


• Microsoft Security Update for Windows 7 for x64-based Systems (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=fa38b001-eef8 -4153-b077-ea524e8a1e18


• Microsoft Security Update for Windows 7 for x64-based Systems (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=7e551e0f-3f02 -49ee-a5a1-8a7480722a6b


• Microsoft Security Update for Windows 7 for x64-based Systems (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=c09cbb73-7814 -4946-8c0a-323d304dd633

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=bc7bfb79-8eaf -4c22-b1c9-e774c55eb06d


• Microsoft Security Update for Windows Server 2003 (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=6287b994-041f -45b7-a230-d689bf1901a8


• Microsoft Security Update for Windows Server 2003 (KB2686509)
  http://www.microsoft.com/downloads/details.aspx?familyid=167e8c49-f9f6 -488b-86ad-4056d3d20213

Microsoft Windows Server 2008 for x64-based Systems SP2

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=d5a6d617-8ef6 -42fa-a325-c15fa7ece7aa


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=4e6d29e1-17fc -4670-9e69-988c040f06e2


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=98c4ac87-eec2 -4e02-b0e1-00626bcb0ffd


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=ab897da8-a927 -42eb-87da-1e5cd820f4c0

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=6414b607-6fb1 -4527-b218-c3cb5adfd4d1


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=2563425d-4f6e -4f33-b775-a8d421b0e254


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB2686509)
  http://www.microsoft.com/downloads/details.aspx?familyid=67f659ee-0d28 -40f3-ae2f-f8fceeac8bff

Microsoft Windows Server 2008 R2 for x64-based Systems SP1

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=6f815b10-c60d -4e9b-8283-494036985e93


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=34824de4-0f26 -4627-8ddb-23d6b9d6671a


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=6dab7283-81ba -4362-adb1-0db25e1f055e


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=1a179bf7-17fa -4dc7-b0c1-af6d911373cd

Microsoft Windows Server 2008 for Itanium-based Systems R2

• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=b9172218-8a3f -4b0f-a14d-64db3778f4cc


• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=d9abec73-150e -40cf-a108-1d8ee89aac92


• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=e075c03e-91db -4974-a6ea-8edeba583293

Microsoft Windows Vista x64 Edition SP2

• Microsoft Security Update for Windows Vista for x64-based Systems (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=838f588b-2a0d -4dae-b54d-782e6985fd83


• Microsoft Security Update for Windows Vista for x64-based Systems (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=3bde7f59-163c -4491-abc9-a822daa8142f


• Microsoft Security Update for Windows Vista for x64-based Systems (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=9f97c5a4-62ee -4e4f-8811-a43545d76327


• Microsoft Security Update for Windows Vista for x64-based Systems (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=8f90c09c-a2cb -4adb-ace7-a8bc38d78ba6

Microsoft Windows 7 for x64-based Systems SP1

• Microsoft Security Update for Windows 7 for x64-based Systems (KB2658846)
  http://www.microsoft.com/downloads/details.aspx?familyid=7aa0b61b-b42c -4d60-8a7f-c61cbd25d6d9


• Microsoft Security Update for Windows 7 for x64-based Systems (KB2659262)
  http://www.microsoft.com/downloads/details.aspx?familyid=fa38b001-eef8 -4153-b077-ea524e8a1e18


• Microsoft Security Update for Windows 7 for x64-based Systems (KB2660649)
  http://www.microsoft.com/downloads/details.aspx?familyid=7e551e0f-3f02 -49ee-a5a1-8a7480722a6b


• Microsoft Security Update for Windows 7 for x64-based Systems (KB2676562)
  http://www.microsoft.com/downloads/details.aspx?familyid=c09cbb73-7814 -4946-8c0a-323d304dd633