OSVDB ID: 18829

Title: Microsoft Windows Open Type (EOT) Font Handling Remote Overflow

Info

Disclosure

Jan 10, 2006

Discovery

Jul 31, 2005

Dates

Exploit

Unknown

Solution

Jan 10, 2006

Description

A remote overflow exists in Microsoft Windows. Many versions fail to perform correct boundary checks in web requests involving embedded fonts, resulting in a heap overflow. With a specially crafted web font, an attacker can cause arbitrary code execution, resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified
OSVDB: Web Related

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft Corporation has released a patch to address this vulnerability.

Products

Microsoft Corporation

Windows

98
98 Second Edition (SE)
Millennium Edition (ME)
2000 Service Pack 4
XP Service Pack 1
XP Service Pack 2
XP Professional x64 Edition
Server 2003
Server 2003 Service Pack 1
Server 2003 for Itanium-based systems
Server 2003 with SP1 for Itanium-based Systems
Server 2003 64-bit Edition

References

Credit

  • Fang Xing - advisorieseeye.com - eEye Digital Security


Direct URL: http://osvdb.org/18829