CVE:CVE-2010-1883
CNNVD:CNNVD-201010-134
嵌入式OpenType（桥式）字体是一个由微软设计，作为嵌入式字体在网页上使用的紧凑型OpenType字体。
Microsoft Windows XP SP2和SP3版本，Windows Server 2003 SP2版本，Windows Vista SP1和SP2版本，Windows Server 2008 Gold，SP2和R2版本以及Windows 7中的Embedded OpenType (EOT)字体引擎中存在整数溢出漏洞。远程攻击者可以借助嵌入字体中的特制表格执行任意代码。
solution:Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_7 to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-:sp2,r2,and avoid the version *:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,-:sp1,-:sp2,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2