« Microsoft Patches for December 2009 | Home | Microsoft to release emergency IE patch – Jan 2010 »
Microsoft Patches for January 2010
By Boundary | January 13, 2010
The first Microsoft patch for 2010 is out, providing cover for a solitary vulnerability in the way Windows handles EOT (Embedded OpenType) fonts.
The update is rated “critical” but Microsoft says there is a low likelihood of exploitation on its newer operating systems.
The vulnerability, which was discovered by Google security engineer Tavis Ormandy, is a remote code execution issue in the way that the Microsoft Windows Embedded OpenType (EOT) Font Engine decompresses specially crafted EOT fonts.
Because Microsoft considers this a very difficult vulnerability to exploit on most operating systems, it is rated “critical” only for Windows 2000.
However, it’s important to note that Windows XP, Windows Vista and Windows 7 are all affected by this flaw.
Topics: Security | No Comments »
Comments