Signature Detail

HTTP: Embedded Malformed OpenType Font Engine Remote Code Execution

This signature detects attempts to exploit a known vulnerability against the OpenType Font Engine. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Windows is prone to a remote code-execution vulnerability that affects the Embedded OpenType (EOT) font engine. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attempts may trigger a denial-of-service condition.

Affected Products

• Avaya Aura Conferencing 6.0 Standard
• Avaya Aura Conferencing Standard
• Avaya CallPilot
• Avaya Communication Server 1000 Telephony Manager
• Avaya Meeting Exchange - Client Registration Server
• Avaya Meeting Exchange - Recording Server
• Avaya Meeting Exchange - Streaming Server
• Avaya Meeting Exchange - Web Conferencing Server
• Avaya Meeting Exchange - Webportal
• Avaya Messaging Application Server 4
• Avaya Messaging Application Server 5
• Avaya Messaging Application Server MM 1.1
• Avaya Messaging Application Server MM 2.0
• Avaya Messaging Application Server MM 3.0
• Avaya Messaging Application Server MM 3.1
• Avaya Messaging Application Server
• Microsoft Windows 7 Beta
• Microsoft Windows 7 RC
• Microsoft Windows 7 for 32-bit Systems
• Microsoft Windows 7 for Itanium-based Systems
• Microsoft Windows 7 for x64-based Systems
• Microsoft Windows 7 Home Premium
• Microsoft Windows 7 Professional
• Microsoft Windows 7 Starter
• Microsoft Windows 7 Ultimate
• Microsoft Windows 7 XP Mode
• Microsoft Windows Server 2003 SP2
• Microsoft Windows Server 2003 Sp2 Compute Cluster
• Microsoft Windows Server 2003 Sp2 Datacenter
• Microsoft Windows Server 2003 Sp2 Enterprise
• Microsoft Windows Server 2003 Sp2 Storage
• Microsoft Windows Server 2003 Datacenter x64 Edition SP2
• Microsoft Windows Server 2003 Enterprise x64 Edition SP2
• Microsoft Windows Server 2003 Itanium SP2
• Microsoft Windows Server 2003 Standard Edition SP2
• Microsoft Windows Server 2003 Web Edition SP2
• Microsoft Windows Server 2008 Datacenter Edition SP2
• Microsoft Windows Server 2008 Datacenter Edition
• Microsoft Windows Server 2008 Enterprise Edition SP2
• Microsoft Windows Server 2008 Enterprise Edition
• Microsoft Windows Server 2008 for 32-bit Systems SP2
• Microsoft Windows Server 2008 for 32-bit Systems
• Microsoft Windows Server 2008 for Itanium-based Systems R2
• Microsoft Windows Server 2008 for Itanium-based Systems SP2
• Microsoft Windows Server 2008 for Itanium-based Systems
• Microsoft Windows Server 2008 for x64-based Systems R2
• Microsoft Windows Server 2008 for x64-based Systems SP2
• Microsoft Windows Server 2008 for x64-based Systems
• Microsoft Windows Server 2008 Standard Edition - Gold
• Microsoft Windows Server 2008 Standard Edition - Gold Datacenter
• Microsoft Windows Server 2008 Standard Edition - Gold Enterprise
• Microsoft Windows Server 2008 Standard Edition - Gold Hpc
• Microsoft Windows Server 2008 Standard Edition - Gold Itanium
• Microsoft Windows Server 2008 Standard Edition - Gold Standard
• Microsoft Windows Server 2008 Standard Edition - Gold Storage
• Microsoft Windows Server 2008 Standard Edition - Gold Web
• Microsoft Windows Server 2008 Standard Edition Itanium
• Microsoft Windows Server 2008 Standard Edition SP2
• Microsoft Windows Server 2008 Standard Edition - Sp2 Hpc
• Microsoft Windows Server 2008 Standard Edition - Sp2 Storage
• Microsoft Windows Server 2008 Standard Edition - Sp2 Web
• Microsoft Windows Server 2008 Standard Edition X64
• Microsoft Windows Server 2008 Standard Edition
• Microsoft Windows Vista Business SP1
• Microsoft Windows Vista Business SP2
• Microsoft Windows Vista Enterprise SP1
• Microsoft Windows Vista Enterprise SP2
• Microsoft Windows Vista Home Basic SP1
• Microsoft Windows Vista Home Basic SP2
• Microsoft Windows Vista Home Premium SP1
• Microsoft Windows Vista Home Premium SP2
• Microsoft Windows Vista SP1
• Microsoft Windows Vista SP2
• Microsoft Windows Vista Ultimate SP1
• Microsoft Windows Vista Ultimate SP2
• Microsoft Windows Vista Business 64-bit edition SP1
• Microsoft Windows Vista Business 64-bit edition SP2
• Microsoft Windows Vista Enterprise 64-bit edition SP1
• Microsoft Windows Vista Enterprise 64-bit edition SP2
• Microsoft Windows Vista Home Basic 64-bit edition SP1
• Microsoft Windows Vista Home Basic 64-bit edition SP2
• Microsoft Windows Vista Home Premium 64-bit edition SP1
• Microsoft Windows Vista Home Premium 64-bit edition SP2
• Microsoft Windows Vista Ultimate 64-bit edition SP1
• Microsoft Windows Vista Ultimate 64-bit edition SP2
• Microsoft Windows Vista x64 Edition SP1
• Microsoft Windows Vista x64 Edition SP2
• Microsoft Windows XP Embedded SP3
• Microsoft Windows XP Home SP3
• Microsoft Windows XP Media Center Edition SP3
• Microsoft Windows XP Professional SP3
• Microsoft Windows XP Professional x64 Edition SP2
• Microsoft Windows XP Tablet PC Edition SP3

References

• BugTraq: 43775
• CVE: CVE-2010-1883