description: Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font library fails to properly handle specially crafted embedded fonts, aka "Express Compressed Fonts Remote Code Execution Vulnerability."
problem types: Remote Code Execution
affected:
{
product: Windows Kernel-Mode Drivers
vendor: Microsoft Corporation
versions:
status: affected, version: Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1
}