CVE-2010-0018: Integer Overflow
Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka "Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0018?
CVE-2010-0018 is rated as important and can lead to remote code execution.
How do I fix CVE-2010-0018?
To fix CVE-2010-0018, you should apply the security updates provided by Microsoft.
Which systems are affected by CVE-2010-0018?
CVE-2010-0018 affects various Microsoft Windows versions including Windows 2000, XP, Server 2003, Vista, and 7.
What are the potential consequences of CVE-2010-0018 exploitation?
Exploitation of CVE-2010-0018 could allow attackers to execute arbitrary code on the victim's system.
Is CVE-2010-0018 a common vulnerability?
CVE-2010-0018 is a known vulnerability that has been documented, making it critical for affected systems to be updated.