This host is missing an critical security update according to Microsoft Bulletin MS13-060.

Successful exploitation will allow remote attackers to execute arbitrary code and or cause memory corruption.

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, https://technet.microsoft.com/en-us/security/bulletin/ms13-060

The flaw is due to an error within the Unicode Scripts Processor (USP10.dll) when processing OpenType fonts.

Microsoft Windows XP x32/64 Edition Service Pack 3 and prior Microsoft Windows 2003 x32/64 Edition Service Pack 2 and prior

Get the vulnerable file version and check appropriate patch is applied or not.

• http://secunia.com/advisories/54364
• http://support.microsoft.com/kb/2850869
• http://www.securelist.com/en/advisories/54364
• https://technet.microsoft.com/en-us/security/bulletin/ms13-060

---

Updated on 2015-03-25