CVE-2010-2741: High severity Microsoft Windows XP vulnerability
The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local users to gain privileges via a crafted application, aka "OpenType Font Validation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker needs local access to the affected system and can exploit the flaw through a crafted application. No authentication is required according to the provided attack vector.
Which systems are identified as affected?
The affected systems listed are Microsoft Windows XP Service Pack 2 and Service Pack 3, and Microsoft Windows Server 2003 Service Pack 2.
What is the likely impact of successful exploitation?
Successful exploitation can allow a local user to gain elevated privileges. The provided impact metrics indicate complete compromise of confidentiality, integrity, and availability.