Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability

  1. Network Vulnerabilities
  2. Windows
  3. Microsoft Windows Server 2003 OpenType Font Engine DoS Vulnerability
Summary
This host is running Windows Server 2003 operating system and is prone to Denial of Service vulnerability.
Impact
Successful exploitation will allow attakers to cause denial of service via a specially-crafted file containing EOT font embedded in the document thus crashing the operating system. Impact Level: System
Solution
Vendor has released patch to fix the issue, refer below link for patch details. http://www.microsoft.com/en-us/download/details.aspx?id=1185
Insight
The vulnerability is due to an error in 'win32k.sys' when processing Embedded OpenType font.
Affected
Microsoft Windows 2003 Service Pack 2 and prior.
References
Updated on 2017-03-28
Severity
High Severity
Classification
Related Vulnerabilities