CVE-2007-1213

The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.

Score

CVSS 2.0 7.2 High

Status

Modified - secure@microsoft.com

Published

2007-04-04

Last modified

2024-08-07

Weaknesses

CWE-824

Affected products

• Windows 2000 (Microsoft)

References

• http://www.securityfocus.com/archive/1/466186/100/200/threaded
• http://www.securityfocus.com/bid/23276
• http://www.securitytracker.com/id?1017845
• http://www.vupen.com/english/advisories/2007/1215
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1797