Vulnerability in N/a

CVE-2010-0018

Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows…

EPSS: 0.689 (98.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

MS10-001 (x_refsource_MS, vendor-advisory)
blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulne… (x_refsource_MISC)
1023432 (vdb-entry, x_refsource_SECTRACK)
35457 (x_refsource_SECUNIA, third-party-advisory)
oval:org.mitre.oval:def:8324 (x_refsource_OVAL, signature, vdb-entry)
TA10-012B (x_refsource_CERT, third-party-advisory)
ADV-2010-0095 (vdb-entry, x_refsource_VUPEN)
37671 (vdb-entry, x_refsource_BID)
61651 (x_refsource_OSVDB, vdb-entry)