This script is Copyright (C) 2010-2015 Tenable Network Security, Inc.
The remote Windows host contains a font driver that allows arbitrary
The remote Windows host contains a version of the OpenType Font (OTF)
Format Driver that is affected by two vulnerabilities :
- The driver does not properly index an array when
parsing OpenType fonts, which could allow a remote
attacker to run arbitrary code in kernel mode.
- The driver does not properly reset a pointer when
freeing memory, resulting in a 'double free' condition,
which could allow a remote attacker to run arbitrary
code in kernel mode. (CVE-2010-3957)
- The driver does not properly parse the CMAP table when
rendering a specially crafted OpenType font, which
could allow a local attacker to run arbitrary code in
kernel mode. (CVE-2010-3959)
See also :
Microsoft has released a set of patches for Windows XP, 2003, Vista,
2008, 7, and 2008 R2.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 7.3
Public Exploit Available : true
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 51163 ()
Bugtraq ID: 453114531545316
CVE ID: CVE-2010-3956CVE-2010-3957CVE-2010-3959
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.