Trend Micro Security

MS11-041:Windows カーネルモード ドライバーの脆弱性により、リモートでコードが実行される (2525694)

  危険度: : 緊急
  CVE識別番号: CVE-2011-1873

  概要

A vulnerability was found in Windows which could allow remote code execution on a computer if the user visits a network share, or a website pointing to one, that contains a malicious Open Type font (OTF). An attacker would need to convince users to visit such sites via a link in an email or instant message. This security update resolves Windows' validation at the kernel level of Open Type fonts.

  トレンドマイクロの対策

  影響を受けるソフトウェア

  • Windows XP Professional x64 Edition Service Pack 2
  • Windows Server 2003 x64 Edition Service Pack 2
  • Windows Server 2003 with SP2 for Itanium-based Systems
  • Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2
  • Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
  • Windows 7 for x64-based Systems and Windows 7 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems and Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for Itanium-based Systems and Windows Server 2008 R2 for Itanium-based Systems Service Pack 1