A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an integer overflow error in the decompression of Embedded OpenType (EOT) fonts. This can be exploited to corrupt memory via a specially crafted EOT font.

Successful exploitation may allow execution of arbitrary code when a user e.g. visits a malicious website.

NOTE: Currently, attack vectors are only known for Windows 2000. Other versions of Windows do include the vulnerable code, but no valid attack vector for reaching it is known.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Tavis Ormandy, Google.

Original Advisory
MS10-001 (KB972270):
http://www.microsoft.com/technet/security/Bulletin/MS10-001.mspx

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area