Secunia

webDEViL has discovered a vulnerability in Microsoft Windows, which can be exploited by malicious people and by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in win32k.sys when processing Embedded OpenType fonts. This can be exploited to crash an affected system when e.g. an HTML page embedding a malicious font is opened.

NOTE: A system crash can occur if an administrator visits a malicious website, or if an unprivileged user opens a malicious, locally stored HTML page.

The vulnerability is confirmed on a fully patched Microsoft Windows Server 2003 SP2. Other versions may also be affected.

Solution
Do not browse untrusted websites or follow untrusted links.
Further details available in Customer Area

Provided and/or discovered by
webDEViL

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/9417

Deep Links
Links available in Customer Area