NVD

Id
11598  
Name
CVE-2010-0018  
Description
Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka "Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-01-13  
Modified Date
2010-08-21  
Seq
2010-0018  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63448 11598 CVE-2010-0018 http://blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulnerability.aspx  View
63449 11598 CVE-2010-0018 oval:org.mitre.oval:def:8324  View
63450 11598 CVE-2010-0018 MS10-001  View
63451 11598 CVE-2010-0018 37671  View
63452 11598 CVE-2010-0018 1023432  View
63453 11598 CVE-2010-0018 TA10-012B  View
63454 11598 CVE-2010-0018 ADV-2010-0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35230 JVNDB-2010-001010 Microsoft Windows の Embedded OpenType フォントエンジンにおける任意のコードを実行される脆弱性 Microsoft Windows の Embedded OpenType フォントエンジンには、圧縮された EOT フォントの処理に関して不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-0018 42598 CVE-2010-0018 11598 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001010.html 2010-01-12 2010-02-09 View