CVE-2006-0010

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Nt
Windows Xp
Windows 2003 Server
Windows 2000
Vendor
CVE Published:
10 January 2006

Summary

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

References

http://seclists.org/fulldisclosure/2006/Jan/363
mailing-listx_refsource_FULLDISC
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.js...
x_refsource_MISC
http://www.kb.cert.org/vuls/id/915930
third-party-advisoryx_refsource_CERT-VN

EPSS Score

83% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.