Dmitry Oleksiuk has discovered a vulnerability in Microsoft Windows, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in atmfd.dll when processing Adobe OpenType font files and can be exploited to cause a excessive CPU consumption and potentially crash the system.

The vulnerability is confirmed on a fully patched Windows XP SP3 (atmfd.dll version 5.1.2.232). Other versions may also be affected.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
Dmitry Oleksiuk (Cr4sh)

Original Advisory
http://blog.cr4.sh/2012/06/0day-windows.html

Deep Links
Links available to Secunia VIM customers