Microsoft Windows Embedded OpenType Font Integer Overflow (MS09-029; CVE-2009-0232)

Embedded OpenType EOT fonts are a compact form of OpenType fonts designed by Microsoft for use as embedded fonts on web pages. These files usually use the extension ".eot". The Embedded OpenType EOT Font Engine is a Microsoft Windows component that enables Windows applications, such as Microsoft...

Microsoft Releases January Security Bulletin

Microsoft has released an update to address a vulnerability in Microsoft Windows in its Microsoft Security Bulletin Summary for January 2010. This vulnerability may allow an attacker to execute arbitrary code. An attacker may be able to exploit this vulnerability by convincing a user to view...

Workaround for Microsoft Embedded OpenType Font Heap Overflow Vulnerability (MS10-001)

A remote code execution vulnerability has been reported in the way that the Microsoft Windows Embedded OpenType EOT Font Engine decompresses specially crafted EOT fonts. EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit this vulnerability via a...