CVE:CVE-2013-3129
CNNVD:CNNVD-201307-160
Microsoft .NET Framework等都是美国微软（Microsoft）公司的产品。Microsoft .NET Framework是一种全面且一致的编程模型，也是一个用于构建Windows、Windows Store、Windows Phone、Windows Server和Microsoft Azure的应用程序的开发平台。Microsoft Windows Server 2008是一款服务器操作系统。Microsoft Windows Server 2012是一款桌面操作系统
Microsoft 多款产品受影响的组件处理特制TrueType字体文件的方式中存在代码注入漏洞。如果用户打开特制的TrueType字体文件，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者随后可安装程序；查看、更改或删除数据；或者创建拥有完全管理权限的新帐户。以下产品及版本中存在漏洞：Microsoft .NET Framework 3.0 SP2，3.5，3.5.1，4，4.5版本；Silverlight 5.1.20513.0之前的5版本，，Windows XP SP2 和SP3，Windows Server 2003 SP2，Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8，Windows Server 2012，Windows RT中的kernel-mode驱动模式中的win32k.sys，GDI+，DirectWrite，Journal；Office 2003 SP3，2007 SP3，2010 SP1中的GDI+；Visual Studio .NET 2003 SP1中的GDI+；Lync 2010，2010 Attendee，2013，Basic 2013中的GDI+。
solution:Upgrade microsoft .net_framework to a higher version than 3.0:sp2,3.5,3.5.1,4.0,4.5,and avoid the version 3.0:sp2,3.5,3.5.1,4.0,4.5; Upgrade microsoft lync to a higher version than 2010,2013,and avoid the version 2010,2013; Upgrade microsoft lync_basic to a higher version than 2013,and avoid the version 2013; Upgrade microsoft office to a higher version than 2003:sp3,2007:sp3,2010:sp1,and avoid the version 2003:sp3,2007:sp3,2010:sp1; Upgrade microsoft silverlight to a higher version than 5.0.60401.0,5.0.60818.0,5.0.60818.0:rc,5.0.61118.0,5.1.10411.0,5.1.20125.0,and avoid the version 5.0.60401.0,5.0.60818.0,5.0.60818.0:rc,5.0.61118.0,5.1.10411.0,5.1.20125.0; Upgrade microsoft visual_studio_.net to a higher version than 2003:sp1,and avoid the version 2003:sp1; Upgrade microsoft windows_7 to a higher version than *:sp1,and avoid the version *:sp1; Upgrade microsoft windows_8 to a higher version than -; Upgrade microsoft windows_rt to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2012 to a higher version than -; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2