Unscored CVE-2013-3181 EUVD-2013-3119GHSA-6779-mr8p-95pj

usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execu…

Published Aug 14, 2013 · Updated Aug 6, 2024 · Assigned by microsoft

Description

usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."

References

oval:org.mitre.oval:def:17442 vdb-entry signature
TA13-225A third-party-advisory
MS13-060 vendor-advisory