Oval Definition:oval:org.mitre.oval:def:8324
Revision Date:2014-03-17Version:46
Title:Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability
Description:Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka "Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-0018
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):
Definition Synopsis
  • Vulnerable Microsoft Windows 2000 SP4 or later
  • Microsoft Windows 2000 SP4 or later is installed
  • AND Fontsub.dll < 5.0.2195.7348 or T2embed.dll < 5.0.2195.7348
  • the version of Fontsub.dll is less than 5.0.2195.7348
  • OR the version of T2embed.dll is less than 5.0.2195.7348
  • OR Vulnerable Microsoft Windows XP (x86) SP2
  • Microsoft Windows XP (x86) SP2 is installed
  • AND Fontsub.dll < 5.1.2600.3634 or T2embed.dll < 5.1.2600.3634
  • the version of Fontsub.dll is less than 5.1.2600.3634
  • OR the version of T2embed.dll is less than 5.1.2600.3634
  • OR Vulnerable Microsoft Windows XP (x86) SP3
  • Microsoft Windows XP (x86) SP3 is installed
  • AND Fontsub.dll < 5.1.2600.5888 or T2embed.dll < 5.1.2600.5888
  • the version of Fontsub.dll is less than 5.1.2600.5888
  • OR the version of T2embed.dll is less than 5.1.2600.5888
  • OR Vulnerable Microsoft Windows XP x64 SP2, Server 2003 x86/x64/ia64
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • AND Fontsub.dll < 5.2.3790.4603 or T2embed.dll < 5.2.3790.4603
  • the version of Fontsub.dll is less than 5.2.3790.4603
  • OR the version of T2embed.dll is less than 5.2.3790.4603
  • OR Vulnerable Microsoft Windows Vista x86/x64 - GDR
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • AND Fontsub.dll < 6.0.6000.16939 or T2embed.dll <6.0.6000.16939
  • the version of Fontsub.dll is less than 6.0.6000.16939
  • OR the version of T2embed.dll is less than 6.0.6000.16939
  • AND Fontsub.dll >= 6.0.6000.16000 or T2embed.dll >= 6.0.6000.16000
  • the version of Fontsub.dll is greater than or equal 6.0.6000.16000
  • OR the version of T2embed.dll is greater than or equal 6.0.6000.16000
  • OR Vulnerable Microsoft Windows Vista x86/x64 - LDR
  • Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • AND Fontsub.dll < 6.0.6000.21142 or T2embed.dll <6.0.6000.21142
  • the version of Fontsub.dll is less than 6.0.6000.21142
  • OR the version of T2embed.dll is less than 6.0.6000.21142
  • AND Fontsub.dll >= 6.0.6000.20000 or T2embed.dll >= 6.0.6000.20000
  • the version of Fontsub.dll is greater than or equal 6.0.6000.20000
  • OR the version of T2embed.dll is greater than or equal 6.0.6000.20000
  • OR Vulnerable Microsoft Windows Vista SP1 x86/x64, Server 2008 32bit/x64/ia64 - GDR
  • Microsoft Windows Vista (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Fontsub.dll < 6.0.6001.18344 or T2embed.dll <6.0.6001.18344
  • the version of Fontsub.dll is less than 6.0.6001.18344
  • OR the version of T2embed.dll is less than 6.0.6001.18344
  • AND Fontsub.dll >= 6.0.6001.18000 or T2embed.dll >= 6.0.6001.18000
  • the version of Fontsub.dll is greater than or equal 6.0.6001.18000
  • OR the version of T2embed.dll is greater than or equal 6.0.6001.18000
  • OR Vulnerable Microsoft Windows Vista SP1 x86/x64, Server 2008 32bit/x64/ia64 - LDR
  • Microsoft Windows Vista (32-bit) Service Pack 1 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Fontsub.dll < 6.0.6001.22544 or T2embed.dll <6.0.6001.22544
  • the version of Fontsub.dll is less than 6.0.6001.22544
  • OR the version of T2embed.dll is less than 6.0.6001.22544
  • AND Fontsub.dll >= 6.0.6001.22000 or T2embed.dll >= 6.0.6001.22000
  • the version of Fontsub.dll is greater than or equal 6.0.6001.22000
  • OR the version of T2embed.dll is greater than or equal 6.0.6001.22000
  • OR Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 32bit/x64/ia64 - GDR
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND Fontsub.dll < 6.0.6002.18124 or T2embed.dll <6.0.6002.18124
  • the version of Fontsub.dll is less than 6.0.6002.18124
  • OR the version of T2embed.dll is less than 6.0.6002.18124
  • AND Fontsub.dll >= 6.0.6002.18000 or T2embed.dll >= 6.0.6002.18000
  • the version of Fontsub.dll is greater than or equal 6.0.6002.18000
  • OR the version of T2embed.dll is greater than or equal 6.0.6002.18000
  • OR Vulnerable Microsoft Windows Vista SP2 x86/x64, Server 2008 SP2 32bit/x64/ia64 - LDR
  • Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • AND Fontsub.dll < 6.0.6002.22247 or T2embed.dll <6.0.6002.22247
  • the version of Fontsub.dll is less than 6.0.6002.22247
  • OR the version of T2embed.dll is less than 6.0.6002.22247
  • AND Fontsub.dll >= 6.0.6002.22000 or T2embed.dll >= 6.0.6002.22000
  • the version of Fontsub.dll is greater than or equal 6.0.6002.22000
  • OR the version of T2embed.dll is greater than or equal 6.0.6002.22000
  • OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64 - GDR
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • the version of Fontsub.dll is less than 6.1.7600.16444
  • OR the version of T2embed.dll is less than 6.1.7600.16444
  • the version of Fontsub.dll is greater than or equal 6.1.7600.16000
  • OR the version of T2embed.dll is greater than or equal 6.1.7600.16000
  • OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x86/x64/ia64 - LDR
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • the version of Fontsub.dll is less than 6.1.7600.20553
  • OR the version of T2embed.dll is less than 6.1.7600.20553
  • the version of Fontsub.dll is greater than or equal 6.1.7600.20000
  • OR the version of T2embed.dll is greater than or equal 6.1.7600.20000
    • BACK