This host is missing an critical security update according to Microsoft Bulletin MS13-082.

Successful exploitation will allow remote attackers to execute the arbitrary code, exhaust available system resource, cause a DoS (Denial of Service) and compromise the system. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, https://technet.microsoft.com/en-us/security/bulletin/ms13-082

Multiple flaws are due to, - An unspecified error when handling OpenType fonts (OTF). - An error when when expanding entity references. - An unspecified error when parsing JSON data.

Microsoft .NET Framework 2.x Microsoft .NET Framework 3.x Microsoft .NET Framework 4.x

Get the vulnerable file version and check appropriate patch is applied or not.

• http://secunia.com/advisories/55043
• http://support.microsoft.com/kb/2878890
• http://technet.microsoft.com/en-us/security/bulletin/ms13-082

---

Updated on 2015-03-25