Summary
This host is running Windows Server 2003 operating system and is prone to Denial of Service vulnerability.
Impact
Successful exploitation will allow attakers to cause denial of service via a specially-crafted file containing EOT font embedded in the document thus crashing the operating system.
Impact Level: System
Solution
Vendor has released patch to fix the issue, refer below link for patch details.
http://www.microsoft.com/en-us/download/details.aspx?id=1185
Insight
The vulnerability is due to an error in 'win32k.sys' when processing Embedded OpenType font.
Affected
Microsoft Windows 2003 Service Pack 2 and prior.
References
Severity
Classification
-
CVE CVE-2009-3020 -
CVSS Base Score: 7.1
AV:N/AC:M/Au:N/C:N/I:N/A:C
Related Vulnerabilities