CVEvulnerability
CVE-2011-0033
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted font, aka "OpenType Font Encoded Character Vulnerability."
Affected configurations
• microsoft windows 2003 server
• microsoft windows 7
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/70821 osvdb.org
- http://secunia.com/advisories/43252 Vendor Advisory
- http://support.avaya.com/css/P8/documents/100127239 support.avaya.com
- http://www.securityfocus.com/bid/46106 www.securityfocus.com
- http://www.securitytracker.com/id?1025034 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0320 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-007 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64906 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11593 oval.cisecurity.org
- http://osvdb.org/70821 osvdb.org
- http://secunia.com/advisories/43252 Vendor Advisory
- http://support.avaya.com/css/P8/documents/100127239 support.avaya.com
- http://www.securityfocus.com/bid/46106 www.securityfocus.com
- http://www.securitytracker.com/id?1025034 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0320 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-007 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64906 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11593 oval.cisecurity.org