Description
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows | 7 for 32-bit Systems Service Pack 1, 7 for x64-based Systems Service Pack 1 | — |
| Microsoft | Windows Server | 2008 R2 for x64-based Systems Service Pack 1 (Core installation), 2008 R2 for Itanium-Based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1, 2008 for 32-bit Systems Service Pack 2 (Core installation), 2008 for Itanium-Based Systems Service Pack 2, 2008 for 32-bit Systems Servic… | — |
Advisories 1
- WID-SEC-2023-0884 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2023