• LOGIN
  • No products in the cart.

Win32k TrueType font-parsing engine vulnerability

Microsoft issued an advisory this week on the TrueType font-parsing vulnerability. The flaw affects every supported version of Windows including Windows 7 and Windows Server 2008. The vulnerability was found to spread the Duqu malware, which is derived from the infamous Stuxnet worm. Microsoft say that an attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. Access to kernel mode means an attacker could install programs, view, change, or delete data; or create new accounts with full user rights. Microsoft will be patching this Windows 7 vulnerability on November Patch Tuesday.

November 4, 2011

Leave a Reply

avatar
  Subscribe  
Notify of

© HAKIN9 MEDIA SP. Z O.O. SP. K. 2013

Privacy Preference Center

Necessary

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

_global_lucky_opt_out, _lo_np_, _lo_cid, _lo_uid, _lo_rid, _lo_v, __lotr, _ga, _gid, _gat, AMP_TOKEN, _gac_, __utma, __utmt, __utmb, __utmc, __utmz, __utmv, __utmx, __utmxx, _gaexp