CVE:CVE-2010-2741
CNNVD:CNNVD-201010-132
OpenType也叫Type 2字体，是由Microsoft和Adobe公司开发的另外一种字体格式。
Microsoft Windows XP SP2和SP3版本，Server 2003 SP2版本中的OpenType Font (OTF)格式驱动在字体处理过程中进行了不正确的整数计算。本地用户可以借助特制的应用程序获得权限提升。该漏洞又名“OpenType字体解析漏洞”。
solution:Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2