This host has moderate security update missing according to Microsoft Bulletin MS11-084.

Successful exploitation could allow local attackers to gain elevated privileges or to run arbitrary code in kernel mode and take complete control of an affected system. An attacker could then install programs view, change, or delete data or create new accounts with full administrative rights. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms11-084

The flaw is due to an array-indexing error in 'Win32k.sys' when parsing TrueType font files, which can be exploited by attackers to cause a denial of service.

Microsoft Windows 7 Service Pack 1 and prior

• http://secunia.com/advisories/46751
• http://support.microsoft.com/kb/2617657
• http://technet.microsoft.com/en-us/security/bulletin/ms11-084

---

Updated on 2015-03-25