MS11-032：OpenType Compact Font Format (CFF) ドライバーの脆弱性により、リモートでコードが実行される (2507618)

2011年5月19日

危険度: : 緊急

CVE識別番号: CVE-2011-0034

概要

This security bulletin resolves a reported vulnerability in the OpenType Compact Font Format (CFF) driver. It may allow remote code execution once an attacker convinces a user to view a website with specially crafted CFF font. An attacker may persuade users to visit such sites via a link in an email or in an Instant Messenger message.

トレンドマイクロの対策

詳しい情報については以下のサイトをご参照ください。
MS11-032：OpenType Compact Font Format (CFF) ドライバーの脆弱性により、リモートでコードが実行される (2507618)

影響を受けるソフトウェア

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 1 and Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems and Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems and Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems and Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems and Windows Server 2008 R2 for Itanium-based Systems Service Pack 1