CVE:CVE-2010-2738
CNNVD:CNNVD-201009-135
Windows和Office产品中所使用的Unicode Scripts Processor（usp10.dll）组件没有正确的验证OpenType字体布局中的表格，用户使用支持嵌入式OpenType字体的应用程序查看了特制文档或网页就可能导致远程执行代码。成功利用此漏洞的攻击者可以获得与本地用户相同的用户权限。
solution:Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,-:sp1,-:sp2,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2; Upgrade microsoft office to a higher version than 2003:sp3,2007:sp2,xp:sp3,and avoid the version 2003:sp3,2007:sp2,xp:sp3