Win32k TrueType font-parsing engine vulnerability

November 4, 2011

Microsoft issued an advisory this week on the TrueType font-parsing vulnerability. The flaw affects every supported version of Windows including Windows 7 and Windows Server 2008. The vulnerability was found to spread the Duqu malware, which is derived from the infamous Stuxnet worm. Microsoft say that an attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. Access to kernel mode means an attacker could install programs, view, change, or delete data; or create new accounts with full user rights. Microsoft will be patching this Windows 7 vulnerability on November Patch Tuesday.

Recommended From Hakin9

Security firm RSA Security breached

Security firm RSA Security breached

RSA Security is one of the biggest players in the enterprise security landscape, featuring advanced

Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Inline Feedbacks
View all comments
© HAKIN9 MEDIA SP. Z O.O. SP. K. 2023
What certifications or qualifications do you hold?
Max. file size: 150 MB.

What level of experience should the ideal candidate have?
What certifications or qualifications are preferred?

Download Free eBook

Step 1 of 4


We’re committed to your privacy. Hakin9 uses the information you provide to us to contact you about our relevant content, products, and services. You may unsubscribe from these communications at any time. For more information, check out our Privacy Policy.