Check Point Advisories

Microsoft OpenType Font Index Privilege Escalation - Ver2 (CVE-2010-3956)

Check Point Reference:	CPAI-2014-0815
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2010-3956
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A privilege escalation vulnerability has been reported in the OpenType Font (OTF) format driver. The vulnerability is due to an error in the OpenType Font (OTF) format driver that fails to properly index an array when parsing OpenType fonts. A remote attacker could exploit this vulnerability via a specially crafted OTF file. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system.