CVE:CVE-2009-0232
CNNVD:CNNVD-200907-253
Microsoft Windows是微软发布的非常流行的操作系统 。
Microsoft Windows的嵌入式OpenType(EOT)字体引擎组件解析特定嵌入式字体中数据记录的方式存在堆溢出漏洞，解析特定嵌入式字体中名称表格的方式存在整数溢出漏洞。如果用户受骗访问了恶意网站并查看了用特制EOT字体所呈现的内容的话，就可以触发上述溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,-:sp1,-:sp2,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3