스톰캐스트 : CVE-2010-2738

전세계

한국

CVE-2010-2738
기본정보	공개일 : 2010-09-16 변경일 : 2011-07-19
CVSS 평가	위험도: 9.3 액세스 벡터 : NETWORK 액세스 복잡성 : 보통 인증 : 없음 기밀성 영향 : 전체 무결성 영향 : 전체 가용성 영향 : 전체 출처 : http://nvd.nist.gov 공개일 : 2010-09-17
설명	The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."
참조	MS, MS10-063
취약 소프트웨어	microsoft office xp microsoft windows_xp microsoft windows_vista x64 microsoft windows_server_2008 x64 microsoft office 2007 microsoft windows_vista x64 microsoft windows_server_2008 x32 microsoft office 2003 microsoft windows_vista - microsoft windows_xp - x64 microsoft windows_vista microsoft windows_server_2008 itanium microsoft windows_server_2008 itanium microsoft windows_server_2003 itanium microsoft windows_server_2008 x64 microsoft windows_vista - microsoft windows_server_2008 - itanium microsoft windows_server_2003 x64 microsoft windows_vista microsoft windows_server_2003 microsoft windows_server_2008 x32