A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a user's system.

The vulnerability is caused due to an error in the OpenType Compact Font Format Driver when parsing OpenType fonts. This can be exploited by tricking a user into navigating to a network share containing a specially crafted font file in Windows Explorer (only Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2) or visit a specially crafted web page using a third-party browser that natively renders OpenType fonts.

Successful exploitation may allow execution of arbirtary code in kernel mode.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Adam Twardoch, Fontlab.

Original Advisory
MS11-032 (KB2507618):
http://www.microsoft.com/technet/security/Bulletin/MS11-032.mspx

Deep Links
Links available to Secunia VIM customers