Oval Definition:oval:org.mitre.oval:def:17442
Revision Date:2013-09-30Version:44
Title:Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution - MS13-060
Description:usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-3181
Platform(s):Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):
Definition Synopsis
  • Vulnerable Microsoft Windows XP (x86) SP3
  • Microsoft Windows XP (x86) SP3 is installed
  • AND Check if the version of Usp10.dll is less than 1.420.2600.6421
  • OR Vulnerable Windows XP (x64) SP2, Windows Server 2003 x64/x86/ia64 SP2 and file version
  • Vulnerable Windows XP (x64) SP2, Windows Server 2003 x64/x86/ia64 SP2
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • AND Check if the version of Usp10.dll is less than 1.422.3790.5194
  • BACK